From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: creating and inserting audits Date: Wed, 8 Sep 2010 10:25:16 -0400 Message-ID: <201009081025.17099.sgrubb@redhat.com> References: <43782B27EE6B5749BBC041BF2AD5ACA429EE09DBD3@01AESMX09-1.aes.de.ittind.com> <201009071717.24180.sgrubb@redhat.com> <43782B27EE6B5749BBC041BF2AD5ACA429EE09DEC0@01AESMX09-1.aes.de.ittind.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: <43782B27EE6B5749BBC041BF2AD5ACA429EE09DEC0@01AESMX09-1.aes.de.ittind.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: "Nestler, Roger - IS" Cc: "linux-audit@redhat.com" List-Id: linux-audit@redhat.com T24gV2VkbmVzZGF5LCBTZXB0ZW1iZXIgMDgsIDIwMTAgMDk6NDg6NDQgYW0gTmVzdGxlciwgUm9n ZXIgLSBJUyB3cm90ZToKPiBUaGUgYmVsb3cgc2VxdWVuY2Ugb2YgZnVuY3Rpb25zIHNlZW1zIHRv IGRvIHRoZSB0cmljay4uLgo+IAo+IGludCBhdWRpdF9mZCA9IGF1ZGl0X29wZW4oKTsKPiBhdWRp dF9sb2dfdXNlcl9tZXNzYWdlKGF1ZGl0X2ZkLCBBVURJVF9VU0VSLCAiTVkgTWVzc2FnZSIgTlVM TCwgTlVMTCwgTlVMTCwKPiAxKTsgYXVkaXRfY2xvc2UoYXVkaXRfZmQpOwoKWWVzLiBUaGVyZSBh cmUgYSBjb3VwbGUgb3RoZXIgbG9nIGZ1bmN0aW9ucyB0aGF0IG1heSBiZSBiZXR0ZXIgc3VpdGVk IApkZXBlbmRpbmcgb24geW91ciBuZWVkcy4gSWYgeW91IHdhbnQgdGhlIHByb2dyYW0gbmFtZSB0 byBzaG93IHVwLCB1c2UgCmF1ZGl0X2xvZ191c2VyX2NvbW1fbWVzc2FnZSgpLiBBbHNvLCBwbGVh c2Ugbm90ZSB0aGlzOgoKI2RlZmluZSBBVURJVF9VU0VSICAgICAgICAxMDA1ICAgIC8qIE1lc3Nh Z2UgZnJvbSB1c2Vyc3BhY2UgLS0gZGVwcmVjYXRlZCAqLwogClRoYXQgdHlwZSBpcyBkZXByZWNh dGVkLCBwbGVhc2UgZG8gbm90IHVzZSBpdC4KCiAKPiBBbHNvIHRoZSBleGVjdXRhYmxlIHRoYXQg SSBjcmVhdGVkLCB0aGVuIGNvcGllZCB0byBhIHJvb3QgYXJlYSBhbmQgdGhlbiByYW4KPiBhcyBy b290LCBzZWVtZWQgdG8gaGF2ZSB0aGUgQ0FQX0FVRElUX1dSSVRFIHBlcm1pc3Npb24gYnkgZGVm YXVsdC4uLiBob3cKPiBkaWQgbXkgYXBwIGdldCB0aGF0IHBlcm1pc3Npb24sIGlzIGl0IGp1c3Qg YmVjYXVzZSBpdOKAmXMgYSByb290IGFwcC4uLiBJCj4gZGlkbnQgZXhwbGljaXRseSBhc3NpZ24g aXQgdG8gdGhlIGFwcCwgZGlkIEk/CgpJZiB5b3VyIGFwcCBydW5zIGFzIHJvb3QsIGl0IGluaGVy aXRzIHRoYXQgY2FwYWJpbGl0eSBieSB2aXJ0dWUgb2YgYmVpbmcgdW5kZXIgCnRoZSByb290IGFj Y291bnQuIElmIHlvdXIgYXBwIHJhbiBhcyBhIG5vcm1hbCB1c2VyLCB0aGVuIHlvdSB3b3VsZCBo YXZlIGEgCnByb2JsZW0gYmVjYXVzZSBub3JtYWwgdXNlcnMgZG8gbm90IGhhdmUgQ0FQX0FVRElU X1dSSVRFLiBZb3Ugd291bGQgZWl0aGVyIApoYXZlIHRvIG1ha2UgeW91ciBhcHAgc2V0dWlkIG9y IGEgaGVscGVyIHRoYXQgaXMgdG8gZG8gdGhlIGxvZ2dpbmcuIElmIHlvdSAKaGF2ZSBhIGhlbHBl ciwgdGhlbiB5b3UgaGF2ZSB0byB3b3JyeSBpZiBpdCBjYW4gYmUgYWJ1c2VkIHRvIGZsb29kIHRo ZSBsb2cuIElmIApkb24ndCBnbyB0aGlzIHJvdXRlLCB5b3UgaGF2ZSB0byBhc2sgaWYgYSBub3Jt YWwgdXNlciBjYW4gZG8gYW55dGhpbmcgdGhhdCBpcyAKc2VjdXJpdHkgY3JpdGljYWwgaW4gdGhl IGZpcnN0IHBsYWNlLgoKIAo+IEp1c3Qgb3V0IG9mIGN1cmlvc2l0eSBpZiBJIHdhbnRlZCB0byBh ZGQgYSBuZXcgdHlwZSwgc2F5ICdNWV9DVVNUT01fQVVESVQnCj4gdGhhdCB3b3VsZCBhcHBlYXIg YXMgc2F5ICd0eXBlPUhFTExPV09STEQnIGluIHRoZSBhdWRpdCBmaWxlLiBJcyB0aGF0Cj4gcG9z c2libGUgd2l0aCBhIGNvbmZpZyBmaWxlIG9yIGZ1bmN0aW9uIGNhbGw/Li4uCgpOby4gV2UgY3Jl YXRlIHR5cGVzIGFzIHRoZXkgYXJlIG5lZWRlZCBmb3Igb3RoZXIgcHJvamVjdHMuIFdlIGhhdmUg cGF0Y2hlZCAKZXZlcnl0aGluZyB0aGF0IG5lZWRzIGF1ZGl0aW5nIHRvIGNyZWF0ZSBhdWRpdCBl dmVudHMuIFdlIGFsc28gY3JlYXRlZCB0aGUgCmdlbmVyaWMgQVVESVRfVFJVU1RFRF9BUFAgdHlw ZSBmb3IgcHJpdmF0ZSB1c2UuIFlvdSBjYW4gZG8gYW55dGhpbmcgd2l0aCB0aGF0IAp0eXBlIHlv dSB3YW50LiBJZiB5b3UgaGF2ZSB0eXBlcyB0aGF0IHlvdSB0aGluayBvdGhlciBwcm9qZWN0cyBt aWdodCBuZWVkLCBsZXQgCm1lIGtub3cgYW5kIEknbGwgc2VlIGhvdyB3ZSBjYW4gZml0IHRoZW0g aW4uCgoKPiBJdCBsb29rcyBhcyBpZiBJJ2QgaGF2ZSB0byBtb2RpZnkgc3R1ZmYgaW4gbWF5YmUg bGliYXVkaXQuaCBhbmQKPiBtc2dfdHlwZXRhYi5oLCByZWNvbXBpbGUuLiBldGMuLi5pbiBvcmRl ciB0byBhZGQgYSBjdXN0b20gdHlwZT8KCkFuZCB1cGRhdGUgYXVyZXBvcnQvYXVzZWFyY2ggYW5k IGxpYmF1cGFyc2UgcGVyaGFwcy4KCi1TdGV2ZQoKLS0KTGludXgtYXVkaXQgbWFpbGluZyBsaXN0 CkxpbnV4LWF1ZGl0QHJlZGhhdC5jb20KaHR0cHM6Ly93d3cucmVkaGF0LmNvbS9tYWlsbWFuL2xp c3RpbmZvL2xpbnV4LWF1ZGl0