Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 11 Nov 2008 20:24:41 GMT
From:      Robert Watson <rwatson@FreeBSD.org>
To:        Perforce Change Reviews <perforce@freebsd.org>
Subject:   PERFORCE change 152816 for review
Message-ID:  <200811112024.mABKOffs057908@repoman.freebsd.org>

next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=152816

Change 152816 by rwatson@rwatson_fledge on 2008/11/11 20:24:24

	Move extended header support information into the OpenBSM 1.1
	alpha 2 section, as we have haven't released alpha 2 yet.  Revise
	description a bit.

Affected files ...

.. //depot/projects/trustedbsd/openbsm/NEWS#9 edit

Differences ...

==== //depot/projects/trustedbsd/openbsm/NEWS#9 (text+ko) ====

@@ -1,11 +1,5 @@
 OpenBSM Version History
 
-- Add support for setting the audit kernel information.  This information
-  will be used when setting the host information for extended header tokens.
-  The audit_control file now supports a "host" parameter which can be used
-  by the auditing daemon to set this information.  If this parameter is not
-  used, the OpenBSM will default to the use of regular tokens.
-
 OpenBSM 1.1 alpha 2
 
 - Include files in OpenBSM are now broken out into two parts: library builds
@@ -23,6 +17,13 @@
   or asprintf().  Added compat/strlcpy.h for Linux.
 - Remove compatibility defines for old Darwin token constant names; now only
   BSM token names are provided and used.
+- Add support for extended header tokens, which contain space for information
+  on the host generating the record.
+- Add support for setting extended host information in the kernel, which is
+  used for setting host information in extended header tokens.  The
+  audit_control file now supports a "host" parameter which can be used by
+  auditd to set the information; if not present, the kernel parameters won't
+  be set and auditd uses unextended headers for records that it generates.
 
 OpenBSM 1.1 alpha 1
 
@@ -347,4 +348,4 @@
   to support reloading of kernel event table.
 - Allow comments in /etc/security configuration files.
 
-$P4: //depot/projects/trustedbsd/openbsm/NEWS#8 $
+$P4: //depot/projects/trustedbsd/openbsm/NEWS#9 $



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200811112024.mABKOffs057908>