| /freebsd-14.2/contrib/openbsm/ |
| H A D | README | 11 praudit(8) for reducing and printing audit trails, as well as the libbsm(3) 12 library to manage configuration files, generate audit records, and parse and 13 print audit trails. It also includes the auditd(8) audit configuration 14 daemon, and the auditdistd(8) audit-trail distribution daemon. 16 Coupled with a kernel audit implementation, OpenBSM can be used to maintain 17 system audit streams, and is a foundation for a full audit-enabled system. 19 reusable in a kernel audit implementation, and may be found in the FreeBSD 30 libauditd/ Common audit management functions for auditd and launchd 40 audit Command line audit control tool 45 audump Debugging tool to parse and print audit databases [all …]
|
| H A D | NEWS | 6 query it, allowing to set the kernel's maximum audit queue length. 82 the audit directory is more than 10 megabytes ('10M'). 89 the audit ID as the argument. 148 - Add 'current' symlink to active audit trail. 149 - Add crash recovery of previous audit trail file when detected on audit 153 in the new audit trail file and includes the path of recovered audit trail 224 - Remove AU_.* hard-coded audit class constants, as audit classes are now 316 application-submitted audit records in the FreeBSD kernel audit 390 - Support for audit filters introduced: audit filters are dynamically 436 Darwin sys/audit.h conflicts with bsm/audit.h due to duplicate types, so [all …]
|
| H A D | FREEBSD-upgrade | 8 src/sys/security/audit Kernel audit framework, some OpenBSM-based files 9 src/usr.sbin/*audit* Makefiles for various OpenBSM tools 25 - Possible updates to src/sys/security/audit, especially relating to 33 contrib/openbsm/bsm audit.h audit_internal.h audit_kevents.h 47 Propagation of changes to src/sys/{bsm,security/audit} is something that
|
| H A D | configure.ac | 5 AC_INIT([OpenBSM], [1.2-alpha5], [trustedbsd-audit@TrustedBSD.org],[openbsm]) 122 # Systems may not define key audit system calls, in which case libbsm cannot 134 AC_DEFINE(HAVE_AUDIT_SYSCALLS,, Define if audit system calls present) 234 # instead of the default for sending trigger messages to the audit components. 245 bin/audit/Makefile
|
| H A D | TODO | 8 - The audit.log.5 man page is incomplete, as it does not describe all 11 on systems that don't have the necessary audit system calls; that would
|
| H A D | INSTALL | 5 and Linux. Some components are built only if appropriate kernel audit 12 encryption of on-the-wire audit streams using auditdistd; the following
|
| /freebsd-14.2/contrib/openbsm/bin/audit/ |
| H A D | Makefile.am | 7 sbin_PROGRAMS = audit program 9 man8_MANS = audit.8 12 audit_SOURCES = auditd_controlUser.c audit.c 18 audit_SOURCES = audit.c
|
| H A D | Makefile.in | 91 sbin_PROGRAMS = audit$(EXEEXT) 92 subdir = bin/audit 107 am__audit_SOURCES_DIST = audit.c auditd_controlUser.c 108 @USE_MACH_IPC_FALSE@am_audit_OBJECTS = audit.$(OBJEXT) 110 @USE_MACH_IPC_TRUE@ audit.$(OBJEXT) 334 man8_MANS = audit.8 335 @USE_MACH_IPC_FALSE@audit_SOURCES = audit.c 336 @USE_MACH_IPC_TRUE@audit_SOURCES = auditd_controlUser.c audit.c 353 $(AUTOMAKE) --foreign bin/audit/Makefile 422 @rm -f audit$(EXEEXT) [all …]
|
| /freebsd-14.2/usr.sbin/audit/ |
| H A D | Makefile | 5 .PATH: ${OPENBSMDIR}/bin/audit 9 PROG= audit 10 MAN= audit.8
|
| /freebsd-14.2/contrib/openbsm/man/ |
| H A D | Makefile.am | 2 audit.2 \ 11 audit.log.5 \
|
| /freebsd-14.2/secure/usr.sbin/sshd/ |
| H A D | Makefile | 9 audit.c audit-bsm.c audit-linux.c platform.c \
|
| /freebsd-14.2/etc/mtree/ |
| H A D | BSD.var.dist | 18 /set gname=audit 19 audit 20 dist uname=auditdistd gname=audit mode=0770
|
| /freebsd-14.2/contrib/openbsm/etc/ |
| H A D | audit_event | 5 # kernel audit events. 202 211:AUE_AUDIT:audit(2):ot 211 220:AUE_AUDITSYS:audit system calls place holder:no 216 225:AUE_AUDITON_GETSTAT:auditon(2) - get audit statistics:ad 220 229:AUE_AUDITON_GETCOND:auditon(2) - get audit state:ad 221 230:AUE_AUDITON_SETCOND:auditon(2) - set audit state:ad 677 6171:AUE_DARWIN_audit_startup:audit startup:ad 678 6172:AUE_DARWIN_audit_shutdown:audit shutdown:ad 700 45000:AUE_audit_startup:audit startup:ad 701 45001:AUE_audit_shutdown:audit shutdown:ad [all …]
|
| H A D | audit_control | 1 dir:/var/audit
|
| /freebsd-14.2/tools/build/options/ |
| H A D | WITHOUT_AUDIT | 1 Do not build audit support into system programs.
|
| /freebsd-14.2/lib/libpam/modules/pam_login_access/ |
| H A D | pam_login_access.h | 43 bool audit; member
|
| /freebsd-14.2/contrib/openbsm/bin/ |
| H A D | Makefile.am | 9 audit \ subdir
|
| /freebsd-14.2/contrib/openbsm/sys/bsm/ |
| H A D | Makefile.am | 5 audit.h \
|
| /freebsd-14.2/libexec/rc/rc.d/ |
| H A D | auditd | 28 /usr/sbin/audit -t
|
| /freebsd-14.2/sys/modules/dtrace/dtaudit/ |
| H A D | Makefile | 4 .PATH: ${SYSDIR}/security/audit
|
| /freebsd-14.2/lib/libbsm/ |
| H A D | Makefile | 62 MAN+= audit.2 \ 63 audit.log.5 \
|
| /freebsd-14.2/etc/ |
| H A D | group | 30 audit:*:77:
|
| /freebsd-14.2/tools/regression/priv/ |
| H A D | priv_audit_submit.c | 67 error = audit(record, sizeof(record)); in priv_audit_submit()
|
| /freebsd-14.2/contrib/tcsh/ |
| H A D | Y2K | 8 Note: Since the last audit, tcsh-6.08.00 has been found to have
|
| /freebsd-14.2/tests/sys/ |
| H A D | Makefile | 42 _audit= audit
|