From: Tony Jones <tonyj@suse.de>
To: linux-audit@redhat.com
Subject: Re: Rational behind RefuseManualStop=yes in auditd.service
Date: Tue, 03 Dec 2013 12:16:15 -0800 [thread overview]
Message-ID: <529E3C0F.8040607@suse.de> (raw)
In-Reply-To: <3276481.Os0RojCrYf@x2>
On 07/30/2013 01:25 PM, Steve Grubb wrote:
> On Tuesday, July 30, 2013 10:04:46 PM Laurent Bigonville wrote:
>> Hi,
>>
>> I would like to know the rational behind RefuseManualStop=yes in
>> auditd.service file.
>
> The short term "fix" is to force admins to use the service command which loads
> legacy helper scripts which are pulled from the old SysV init script. It sends
> signals in the user's context so that the auid is correct.
You mean this? https://lists.fedoraproject.org/pipermail/devel/2012-June/169411.html
The problem is that (I believe) this feature isn't in upstream systemd, rather it's Fedora specific.
> If you don't need to meet common criteria requirements, then patch it out so its the way you like it.
If I'm correct and the above is Fedora specific, I would have thought the better option was to not use such extensions in the audit svn codebase; rather patch them *in* via the Fedora rpms. Or make it configure tuneable.
Tony
next prev parent reply other threads:[~2013-12-03 20:16 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-07-30 20:04 Rational behind RefuseManualStop=yes in auditd.service Laurent Bigonville
2013-07-30 20:25 ` Steve Grubb
2013-12-03 20:16 ` Tony Jones [this message]
2013-12-18 20:38 ` Eric Paris
2013-12-18 21:07 ` Tony Jones
2013-12-18 21:16 ` Tony Jones
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=529E3C0F.8040607@suse.de \
--to=tonyj@suse.de \
--cc=linux-audit@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.