[SSSD] [PATCHES] AUDIT: Add audit support for SSSD
Jakub Hrozek
jhrozek at redhat.com
Tue Aug 12 14:00:50 UTC 2014
On Tue, Aug 12, 2014 at 03:13:00PM +0200, Michal Židek wrote:
> These two patches are initial patches for tickets
>
> https://fedorahosted.org/sssd/ticket/2373
This is the local provider, targetting 1.13.
> https://fedorahosted.org/sssd/ticket/2372
For the libselinux auditing, did you check if it is possible to use
libselinux to manage the mappings? The libselinux maintainer wasn't
quite sure, but suspected it wasn't possible.
Anyway, I think we should check if
a) using libselinux the way we use it in src/tools/selinux.c was
possible instead of writing out the flat files
b) if yes, then check if libselinux emits the audit messages we
need.
>
> I will add wrappers for more libaudit functions as
> needed in later patches.
>
> As for now, the audit support is not build by default
> so you need to run --with-libaudit. I would like to
> make it default when we have the above tickets
> solved.
>
> Thanks,
> Michal
More information about the sssd-devel
mailing list