From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: Troubleshooting Custom audispd Plugin Date: Fri, 07 Sep 2018 08:57:02 -0400 Message-ID: <1829734.4gin0Gxk11@x2> References: Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com T24gRnJpZGF5LCBTZXB0ZW1iZXIgNywgMjAxOCA3OjMwOjA5IEFNIEVEVCBPc2FtYSBFbG5hZ2dh ciB3cm90ZToKPiBIaSwKPiAKPiBJJ20gd29ya2luZyBvbiBhIGN1c3RvbSBhdWRpc3BkIHBsdWdp biB3cml0dGVuIGluIFB5dGhvbiAzLiAgSXTigJlzIGEgd29yayBpbgo+IHByb2dyZXNzIGFuZCBJ 4oCZdmUgc3VjY2Vzc2Z1bGx5IHJ1biBpdCBudW1lcm91cyB0aW1lcyBhcyBhbiBhdWRpc3BkIHBs dWdpbi4KPiBIb3dldmVyLCBJIHNvbWV0aW1lcyBtYWtlIG1vZGlmaWNhdGlvbnMgdGhhdCByZXN1 bHQgaW4gdGhlIGF1ZGlzcGQgcGx1Z2luCj4gZmFpbGluZyBhbmQgSSBlbmQgdXAgd2l0aCB0aGUg Zm9sbG93aW5nIGluIC92YXIvbG9nL3N5c2xvZwo+IAo+IFNlcCAgNiAyMDo1MjowNSB1YnVudHUt aHlwZXJ2aXNvciBhdWRpc3BkOiBwbHVnaW4gL3Vzci9iaW4vcHl0aG9uMwo+IHRlcm1pbmF0ZWQg dW5leHBlY3RlZGx5Cj4gU2VwICA2IDIwOjUyOjA1IHVidW50dS1oeXBlcnZpc29yIGF1ZGlzcGQ6 IHBsdWdpbiAvdXNyL2Jpbi9weXRob24zIHdhcwo+IHJlc3RhcnRlZAo+IC4uLgo+IAo+IFRoaXMg aXMgcmVwZWF0ZWQgc2V2ZXJhbCB0aW1lcyB1bnRpbCBhdWRpc3BkIGdpdmVzIHVwIGFuZCBJIHNl ZSB0aGUKPiBmb2xsb3dpbmcgbWVzc2FnZToKPiAKPiBTZXAgIDYgMjA6NTI6MTQgdWJ1bnR1LWh5 cGVydmlzb3IgYXVkaXNwZDogcGx1Z2luIC91c3IvYmluL3B5dGhvbjMgaGFzCj4gZXhjZWVkZWQg bWF4X3Jlc3RhcnRzCj4gCj4gVG8gdHJvdWJsZXNob290LCBJIG1vZGlmeSBteSBjb2RlIHRvIHJl YWQgZnJvbSAvdmFyL2xvZy9hdWRpdC9hdWRpdC5sb2cKPiBpbnN0ZWFkLiAgSSBtb2RpZnkgYSBz aW5nbGUgbGluZSAod2l0aCBmaWxlaW5wdXQuaW5wdXQoKSB0byByZWFkIGZyb20KPiBteWZpbGUg YXMgc2hvd24gaW4gdGhlIGNvbW1lbnRlZCBsaW5lIGJlbG93KS4KPiAKPiBIZXJlIGlzIHRoZSBj b2RlIHNuaXBwZXQgKGEgY29sb3JpemVkIGVhc2llciB0byByZWFkIHZlcnNpb24gaXMgYXZhaWxh YmxlCj4gaGVyZSAtIGh0dHBzOi8vcGFzdGViaW4uY29tLzg0Tnh1M1JwKToKPiAKPiAjIGxldCB1 cyBpbml0aWFsaXplIHRoZSBBdVBhcnNlcgo+IGF1cCA9IGF1cGFyc2UuQXVQYXJzZXIoYXVwYXJz ZS5BVVNPVVJDRV9GRUVEKQo+IAo+ICMgd2UgaW5pdGFsaXplIHRoZSBjYWxsYmFjayB0byBiZSBm bl9wcm9jZXNzX2V2ZW50Cj4gYXVwLmFkZF9jYWxsYmFjayhmbl9wcm9jZXNzX2V2ZW50LCBOb25l LCBOb25lKQo+IAo+IG15ZmlsZSA9ICIvdmFyL2xvZy9hdWRpdC9hdWRpdC5sb2ciCj4gCj4gd2hp bGUgVHJ1ZToKPiAgICAgdHJ5Ogo+ICAgICAgICAgIyB3ZSByZWFkIGluIGxpbmUgYnkgbGluZSBm cm9tIHN0ZGluCj4gICAgICAgICBmb3IgbGluZSBpbiBmaWxlaW5wdXQuaW5wdXQoKToKPiAgICAg ICAgICNmb3IgbGluZSBpbiBmaWxlaW5wdXQuaW5wdXQobXlmaWxlKToKPiAgICAgICAgICAgICBh dXAuZmVlZChsaW5lKQo+ICAgICBleGNlcHQ6Cj4gICAgICAgICBsb2dnZXIuZXJyb3IoIkZhdGFs IGVycm9yIGluIHdoaWxlIGxvb3AiLCBleGNfaW5mbz1UcnVlKQo+IAo+ICMgd2UgZmx1c2ggdGhl IGZlZWQgd2hlbiB3ZSBxdWl0Cj4gYXVwLmZsdXNoX2ZlZWQoKQo+IAo+IEFueSBzdWdnZXN0aW9u cyBvbiBob3cgdG8gdHJvdWJsZXNob290IHRoZXNlIHR5cGVzIG9mIGlzc3VlcyB3aGVuIHJlYWRp bmcKPiBmcm9tIGEgZmlsZSB3b3JrcyBmaW5lIHdpdGhvdXQgaXNzdWUgYnV0IHJ1bm5pbmcgaXQg YXMgYSBwbHVnaW4gZmFpbHMgYXMKPiBzaG93biBpbiAvdmFyL2xvZy9zeXNsb2c/ICBUaGFua3Mu CgpBbGwgcGx1Z2lucyBoYXZlIGEgcmVxdWlyZW1lbnQgdG8gdGFrZSBldmVudHMgZnJvbSBzdGRp bi4gQXMgbG9uZyBhcyBpdCAKZXhwZWN0cyBzdHJpbmdzICh3aGljaCBpcyB0aGUgd2F5IHRoYXQg YXVwYXJzZSB3YW50cyB0aGVtKSwgdGhlbiBhbGwgeW91IGhhdmUgCnRvIGRvIGlzOgoKYXVzZWFy Y2ggLS1zdGFydCBib290IC0tcmF3IHwgLi9wbHVnaW4KCllvdSBjYW4gYWxzbyBzYXZlIHJhdyBs b2dzIHdpdGggYXVzZWFyY2ggYW5kIGNhdCB0aGVtIGludG8gdGhlIHBsdWdpbi4gVGhpcyAKaXMg aGVscGZ1bCB3aGVuIHlvdSBnZXQgYSBwcm9ibGVtIGRvd24gdG8gYSBjZXJ0YWluIHNlcmllcyBv ZiBldmVudHMgYW5kIHlvdSAKZG9uJ3Qgd2FudCB0byBnbyB0aHJvdWdoIGEgdGhvdXNhbmQgZXZl bnRzIGJlZm9yZSB0aGUgcHJvYmxlbSBzZXF1ZW5jZS4KCi1TdGV2ZQoKCgoKLS0KTGludXgtYXVk aXQgbWFpbGluZyBsaXN0CkxpbnV4LWF1ZGl0QHJlZGhhdC5jb20KaHR0cHM6Ly93d3cucmVkaGF0 LmNvbS9tYWlsbWFuL2xpc3RpbmZvL2xpbnV4LWF1ZGl0