From: Aleksander Adamowski <olo@fb.com>
To: "Linux-audit@redhat.com" <Linux-audit@redhat.com>
Subject: Patch to add support for more syslog facilities
Date: Sat, 9 Jan 2016 00:56:50 +0000 [thread overview]
Message-ID: <D2B59AD1.FBBE%olo@fb.com> (raw)
[-- Attachment #1: Type: text/plain, Size: 349 bytes --]
The set of syslog facilities that can be configured for the builting syslog
plugin is pretty limited (LOG_LOCAL0 - LOG_LOCAL9).
This patch adds a bunch of other facilities that might make sense for some
people (like us). Facilities that wouldn¹t make any sense (like LOG_NEWS or
LOG_LPR) are still left out.
Best Regards,
--
Olo
[-- Attachment #2: audispd_syslog_facilities.patch --]
[-- Type: application/octet-stream, Size: 834 bytes --]
Index: audisp/audispd-builtins.c
===================================================================
--- audisp/audispd-builtins.c (revision 1150)
+++ audisp/audispd-builtins.c (working copy)
@@ -302,6 +302,16 @@
facility = LOG_LOCAL6;
else if (strcasecmp(conf->args[i], "LOG_LOCAL7") == 0)
facility = LOG_LOCAL7;
+ else if (strcasecmp(conf->args[i], "LOG_AUTH") == 0)
+ facility = LOG_AUTH;
+ else if (strcasecmp(conf->args[i], "LOG_AUTHPRIV") == 0)
+ facility = LOG_AUTHPRIV;
+ else if (strcasecmp(conf->args[i], "LOG_DAEMON") == 0)
+ facility = LOG_DAEMON;
+ else if (strcasecmp(conf->args[i], "LOG_SYSLOG") == 0)
+ facility = LOG_SYSLOG;
+ else if (strcasecmp(conf->args[i], "LOG_USER") == 0)
+ facility = LOG_USER;
else {
syslog(LOG_ERR,
"Unknown log priority/facility %s",
[-- Attachment #3: Type: text/plain, Size: 0 bytes --]
next reply other threads:[~2016-01-09 0:56 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-01-09 0:56 Aleksander Adamowski [this message]
2016-01-11 17:56 ` Patch to add support for more syslog facilities Steve Grubb
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=D2B59AD1.FBBE%olo@fb.com \
--to=olo@fb.com \
--cc=Linux-audit@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.