[SSSD] [PATCHES] AUDIT: Add audit support for SSSD

Jakub Hrozek jhrozek at redhat.com
Tue Aug 12 14:00:50 UTC 2014


On Tue, Aug 12, 2014 at 03:13:00PM +0200, Michal Židek wrote:
> These two patches are initial patches for tickets
> 
> https://fedorahosted.org/sssd/ticket/2373

This is the local provider, targetting 1.13.

> https://fedorahosted.org/sssd/ticket/2372

For the libselinux auditing, did you check if it is possible to use
libselinux to manage the mappings? The libselinux maintainer wasn't
quite sure, but suspected it wasn't possible.

Anyway, I think we should check if
    a) using libselinux the way we use it in src/tools/selinux.c was
    possible instead of writing out the flat files
    b) if yes, then check if libselinux emits the audit messages we
    need.

> 
> I will add wrappers for more libaudit functions as
> needed in later patches.
> 
> As for now, the audit support is not build by default
> so you need to run --with-libaudit. I would like to
> make it default when we have the above tickets
> solved.
> 
> Thanks,
> Michal




More information about the sssd-devel mailing list