From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: Troubleshooting Custom audispd Plugin Date: Fri, 07 Sep 2018 09:42:24 -0400 Message-ID: <13135296.GjVW5Io8U1@x2> References: <1829734.4gin0Gxk11@x2> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Osama Elnaggar Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com SGVsbG8sCgpPbiBGcmlkYXksIFNlcHRlbWJlciA3LCAyMDE4IDk6MTk6MzQgQU0gRURUIE9zYW1h IEVsbmFnZ2FyIHdyb3RlOgo+IEkgdHJpZWQgaXQgYnV0IHRoZSBwcm9ibGVtIHN0aWxsIG9ubHkg c2hvd3MgdXAgd2hlbiBpdCBydW5zIGFzIGEgcGx1Z2luLgo+IEFsc28sIHRoZSBzY3JpcHQgYmFz aWNhbGx5IGRvZXMgc29tZSBwcm9jZXNzaW5nIG9uIHRoZSByZWNvcmRzIGFuZCBleHRyYWN0cwo+ IGNlcnRhaW4gZGF0YSBmcm9tIHJlY29yZHMgb2YgaW50ZXJlc3QsIHNvIGl0IHNob3VsZCBydW4g ZmluZSByZWdhcmRsZXNzIG9mCj4gdGhlIGlucHV0IHNvdXJjZS4gIEl0IHNlZW1zIHRvIGZhaWwg aW1tZWRpYXRlbHkgd2hlbiBydW4gYXMgYSBwbHVnaW4uICBBbnkKPiBvdGhlciBzdWdnZXN0aW9u cyBvbiB0cm91Ymxlc2hvb3RpbmcgdGhlIGRpc2NlcGFuY3k/CgpJIGRvbid0IGtub3cgaWYgdGhl cmUgYXJlIGFueSBwZXJtaXNzaW9uIHJlc3RyaWN0aW9ucyBieSBBcHBBcm1vciBvciBTRSBMaW51 eCAKaWYgeW91IGhhdmUgdGhvc2UgcnVubmluZy4gSSBkb24ndCBrbm93IGlmIHlvdSBhcmUgbG9n Z2luZyBlcnJvcnMgd2hlbiB0aGV5IApvY2N1ci4gQnV0IG15IGd1ZXNzIHdvdWxkIGJlIHNvbWV0 aGluZyBpcyB0aHJvd2luZyBhbiB1bmNhdWdodCBleGNlcHRpb24uIApXaGljaCBtaWdodCBiZSBj YXVzZWQgYnkgTUFDIHBlcm1pc3Npb25zLiBKdXN0IGEgZ3Vlc3MuCgotU3RldmUKCj4gUFMuICBJ IGFsc28gcmVhZCB5b3VyIHZlcnkgdXNlZnVsIGF1ZGl0ZCB0dXRvcmlhbHMgb3ZlciBoZXJlIC0K PiBodHRwczovL3NlY3VyaXR5LXBsdXMtZGF0YS1zY2llbmNlLmJsb2dzcG90LmNvbS8gVGhhbmtz Lgo+IAo+ID4gSGksCj4gPiAKPiA+IEknbSB3b3JraW5nIG9uIGEgY3VzdG9tIGF1ZGlzcGQgcGx1 Z2luIHdyaXR0ZW4gaW4gUHl0aG9uIDMuIEl04oCZcyBhIHdvcmsKPiAKPiBpbgo+IAo+ID4gcHJv Z3Jlc3MgYW5kIEnigJl2ZSBzdWNjZXNzZnVsbHkgcnVuIGl0IG51bWVyb3VzIHRpbWVzIGFzIGFu IGF1ZGlzcGQKPiAKPiBwbHVnaW4uCj4gCj4gPiBIb3dldmVyLCBJIHNvbWV0aW1lcyBtYWtlIG1v ZGlmaWNhdGlvbnMgdGhhdCByZXN1bHQgaW4gdGhlIGF1ZGlzcGQgcGx1Z2luCj4gPiBmYWlsaW5n IGFuZCBJIGVuZCB1cCB3aXRoIHRoZSBmb2xsb3dpbmcgaW4gL3Zhci9sb2cvc3lzbG9nCj4gPiAK PiA+IFNlcCA2IDIwOjUyOjA1IHVidW50dS1oeXBlcnZpc29yIGF1ZGlzcGQ6IHBsdWdpbiAvdXNy L2Jpbi9weXRob24zCj4gPiB0ZXJtaW5hdGVkIHVuZXhwZWN0ZWRseQo+ID4gU2VwIDYgMjA6NTI6 MDUgdWJ1bnR1LWh5cGVydmlzb3IgYXVkaXNwZDogcGx1Z2luIC91c3IvYmluL3B5dGhvbjMgd2Fz Cj4gPiByZXN0YXJ0ZWQKPiA+IC4uLgo+ID4gCj4gPiBUaGlzIGlzIHJlcGVhdGVkIHNldmVyYWwg dGltZXMgdW50aWwgYXVkaXNwZCBnaXZlcyB1cCBhbmQgSSBzZWUgdGhlCj4gPiBmb2xsb3dpbmcg bWVzc2FnZToKPiA+IAo+ID4gU2VwIDYgMjA6NTI6MTQgdWJ1bnR1LWh5cGVydmlzb3IgYXVkaXNw ZDogcGx1Z2luIC91c3IvYmluL3B5dGhvbjMgaGFzCj4gPiBleGNlZWRlZCBtYXhfcmVzdGFydHMK PiA+IAo+ID4gVG8gdHJvdWJsZXNob290LCBJIG1vZGlmeSBteSBjb2RlIHRvIHJlYWQgZnJvbSAv dmFyL2xvZy9hdWRpdC9hdWRpdC5sb2cKPiA+IGluc3RlYWQuIEkgbW9kaWZ5IGEgc2luZ2xlIGxp bmUgKHdpdGggZmlsZWlucHV0LmlucHV0KCkgdG8gcmVhZCBmcm9tCj4gPiBteWZpbGUgYXMgc2hv d24gaW4gdGhlIGNvbW1lbnRlZCBsaW5lIGJlbG93KS4KPiA+IAo+ID4gSGVyZSBpcyB0aGUgY29k ZSBzbmlwcGV0IChhIGNvbG9yaXplZCBlYXNpZXIgdG8gcmVhZCB2ZXJzaW9uIGlzIGF2YWlsYWJs ZQo+ID4gaGVyZSAtIGh0dHBzOi8vcGFzdGViaW4uY29tLzg0Tnh1M1JwKToKPiA+IAo+ID4gIyBs ZXQgdXMgaW5pdGlhbGl6ZSB0aGUgQXVQYXJzZXIKPiA+IGF1cCA9IGF1cGFyc2UuQXVQYXJzZXIo YXVwYXJzZS5BVVNPVVJDRV9GRUVEKQo+ID4gCj4gPiAjIHdlIGluaXRhbGl6ZSB0aGUgY2FsbGJh Y2sgdG8gYmUgZm5fcHJvY2Vzc19ldmVudAo+ID4gYXVwLmFkZF9jYWxsYmFjayhmbl9wcm9jZXNz X2V2ZW50LCBOb25lLCBOb25lKQo+ID4gCj4gPiBteWZpbGUgPSAiL3Zhci9sb2cvYXVkaXQvYXVk aXQubG9nIgo+ID4gCj4gPiB3aGlsZSBUcnVlOgo+ID4gdHJ5Ogo+ID4gIyB3ZSByZWFkIGluIGxp bmUgYnkgbGluZSBmcm9tIHN0ZGluCj4gPiBmb3IgbGluZSBpbiBmaWxlaW5wdXQuaW5wdXQoKToK PiA+ICNmb3IgbGluZSBpbiBmaWxlaW5wdXQuaW5wdXQobXlmaWxlKToKPiA+IGF1cC5mZWVkKGxp bmUpCj4gPiBleGNlcHQ6Cj4gPiBsb2dnZXIuZXJyb3IoIkZhdGFsIGVycm9yIGluIHdoaWxlIGxv b3AiLCBleGNfaW5mbz1UcnVlKQo+ID4gCj4gPiAjIHdlIGZsdXNoIHRoZSBmZWVkIHdoZW4gd2Ug cXVpdAo+ID4gYXVwLmZsdXNoX2ZlZWQoKQo+ID4gCj4gPiBBbnkgc3VnZ2VzdGlvbnMgb24gaG93 IHRvIHRyb3VibGVzaG9vdCB0aGVzZSB0eXBlcyBvZiBpc3N1ZXMgd2hlbiByZWFkaW5nCj4gPiBm cm9tIGEgZmlsZSB3b3JrcyBmaW5lIHdpdGhvdXQgaXNzdWUgYnV0IHJ1bm5pbmcgaXQgYXMgYSBw bHVnaW4gZmFpbHMgYXMKPiA+IHNob3duIGluIC92YXIvbG9nL3N5c2xvZz8gVGhhbmtzLgo+IAo+ IEFsbCBwbHVnaW5zIGhhdmUgYSByZXF1aXJlbWVudCB0byB0YWtlIGV2ZW50cyBmcm9tIHN0ZGlu LiBBcyBsb25nIGFzIGl0Cj4gZXhwZWN0cyBzdHJpbmdzICh3aGljaCBpcyB0aGUgd2F5IHRoYXQg YXVwYXJzZSB3YW50cyB0aGVtKSwgdGhlbiBhbGwgeW91Cj4gaGF2ZQo+IHRvIGRvIGlzOgo+IAo+ IGF1c2VhcmNoIC0tc3RhcnQgYm9vdCAtLXJhdyB8IC4vcGx1Z2luCj4gCj4gWW91IGNhbiBhbHNv IHNhdmUgcmF3IGxvZ3Mgd2l0aCBhdXNlYXJjaCBhbmQgY2F0IHRoZW0gaW50byB0aGUgcGx1Z2lu LiBUaGlzCj4gaXMgaGVscGZ1bCB3aGVuIHlvdSBnZXQgYSBwcm9ibGVtIGRvd24gdG8gYSBjZXJ0 YWluIHNlcmllcyBvZiBldmVudHMgYW5kCj4geW91Cj4gZG9uJ3Qgd2FudCB0byBnbyB0aHJvdWdo IGEgdGhvdXNhbmQgZXZlbnRzIGJlZm9yZSB0aGUgcHJvYmxlbSBzZXF1ZW5jZS4KPiAKPiAtU3Rl dmUKCgoKCgotLQpMaW51eC1hdWRpdCBtYWlsaW5nIGxpc3QKTGludXgtYXVkaXRAcmVkaGF0LmNv bQpodHRwczovL3d3dy5yZWRoYXQuY29tL21haWxtYW4vbGlzdGluZm8vbGludXgtYXVkaXQ=