Potential Patch

[Phil Dibowitz]

On Sat, Jul 24, 2004 at 05:56:25PM +0200, Sergio Gelato wrote:
> * Phil Dibowitz [2004-07-22 16:51:11 -0700]:
> > 1. Solaris BSM/Auditd supprt
> > This is properly ifdef'd out, and I added support in the autoconf stuff to
> > only enable it in Solaris.
> 
> Is this really Solaris-only? I'm wondering because I've noticed that the
> sshd shipped by Apple in Mac OS 10.3.4 has a number of "BSM audit:" strings
> including
> BSM audit: solaris_audit_record failed to write "%s" record: %s

AFAIK, yeah... but maybe Apple wrote their own version...

> Do you also log all input to the command? If not, what does this extra logging
> buy you over ordinary process accounting?

Yes. That's all in the 'cmd' variable which is logged.

-- 
Phil Dibowitz
Systems Architect and Administrator
Enterprise Infrastructure / ISD / USC
UCC 174 - 213-821-5427

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20040726/d56a98b9/attachment.bin