From mboxrd@z Thu Jan 1 00:00:00 1970 From: Miloslav Trmac Subject: Re: [patches] Implement mode=forward in audisp-remote Date: Thu, 24 Mar 2011 09:38:08 -0400 (EDT) Message-ID: <2112309240.493015.1300973888446.JavaMail.root@zmail07.collab.prod.int.phx2.redhat.com> References: <201103221343.57665.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_Part_493014_308825656.1300973888444" Return-path: In-Reply-To: <201103221343.57665.sgrubb@redhat.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Steve Grubb Cc: linux-audit List-Id: linux-audit@redhat.com ------=_Part_493014_308825656.1300973888444 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Hello, ----- Original Message ----- > I set the suggested persistent queue to: /var/spool/audit/remote.log. Right, that is a better default location. The attached patch updates the path in other places. Mirek ------=_Part_493014_308825656.1300973888444 Content-Type: text/x-patch; name=audisp-remote.patch Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename=audisp-remote.patch SW5kZXg6IGF1ZGlzcC9wbHVnaW5zL3JlbW90ZS9hdWRpc3AtcmVtb3RlLmMKPT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQot LS0gYXVkaXNwL3BsdWdpbnMvcmVtb3RlL2F1ZGlzcC1yZW1vdGUuYwkocmV2aXNpb24gNDcwKQor KysgYXVkaXNwL3BsdWdpbnMvcmVtb3RlL2F1ZGlzcC1yZW1vdGUuYwkod29ya2luZyBjb3B5KQpA QCAtMzU4LDcgKzM1OCw3IEBACiAJaWYgKGNvbmZpZy5xdWV1ZV9maWxlICE9IE5VTEwpCiAJCXBh dGggPSBjb25maWcucXVldWVfZmlsZTsKIAllbHNlCi0JCXBhdGggPSAiL3Zhci9saWIvYXVkaXRk LXJlbW90ZS9xdWV1ZSI7CisJCXBhdGggPSAiL3Zhci9zcG9vbC9hdWRpdC9yZW1vdGUubG9nIjsK IAlxX2ZsYWdzID0gUV9JTl9NRU1PUlk7CiAJaWYgKGNvbmZpZy5tb2RlID09IE1fU1RPUkVfQU5E X0ZPUldBUkQpCiAJCS8qIEZJWE1FOiBsZXQgdXNlciBjb250cm9sIFFfU1lOQz8gKi8KSW5kZXg6 IGF1ZGlzcC9wbHVnaW5zL3JlbW90ZS9hdWRpc3AtcmVtb3RlLmNvbmYuNQo9PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0t LSBhdWRpc3AvcGx1Z2lucy9yZW1vdGUvYXVkaXNwLXJlbW90ZS5jb25mLjUJKHJldmlzaW9uIDQ3 MCkKKysrIGF1ZGlzcC9wbHVnaW5zL3JlbW90ZS9hdWRpc3AtcmVtb3RlLmNvbmYuNQkod29ya2lu ZyBjb3B5KQpAQCAtMjUsOSArMjUsNiBAQAogLklSIHRjcCAsCiB0aGUgcmVtb3RlIGxvZ2dpbmcg YXBwIHdpbGwganVzdCBtYWtlIGEgbm9ybWFsIGNsZWFyIHRleHQgY29ubmVjdGlvbiB0byB0aGUg cmVtb3RlIHN5c3RlbS4gVGhpcyBpcyBub3QgdXNlZCBpZiBrZXJiZXJvcyBpcyBlbmFibGVkLgog LlRQCi0uSSBxdWV1ZV9maWxlCi1UaGlzIGlzIHRoZSBhYnNvbHV0ZSBwYXRoIHRvIHRoZSBmaWxl IHRvIGJlIHVzZWQgYXMgYSBwZXJzaXN0ZW50IHF1ZXVlLgotLlRQCiAuSSBtb2RlCiBUaGlzIHBh cmFtZXRlciB0ZWxscyB0aGUgcmVtb3RlIGxvZ2dpbmcgYXBwIHdoYXQgc3RyYXRlZ3kgdG8gdXNl IGdldHRpbmcgcmVjb3JkcyB0byB0aGUgcmVtb3RlIHN5c3RlbS4gVmFsaWQgdmFsdWVzIGFyZQog LklSIGltbWVkaWF0ZSAiLCBhbmQgIiBmb3J3YXJkICIgLgpAQCAtNDIsNyArMzksNyBAQAogLkkg cXVldWVfZmlsZQogUGF0aCBvZiBhIGZpbGUgdXNlZCBmb3IgdGhlIGV2ZW50IHF1ZXVlIGlmCiAu SSBtb2RlCi1pcyBzZXQgdG8gXGZJZm9yd2FyZFxmUC4gIFRoZSBkZWZhdWx0IGlzIFxmQi92YXIv bGliL2F1ZGl0ZC1yZW1vdGUvcXVldWVcZlAuCitpcyBzZXQgdG8gXGZJZm9yd2FyZFxmUC4gIFRo ZSBkZWZhdWx0IGlzIFxmQi92YXIvc3Bvb2wvYXVkaXQvcmVtb3RlLmxvZ1xmUC4KIC5UUAogLkkg cXVldWVfZGVwdGgKIFRoaXMgb3B0aW9uIGlzIGFuIHVuc2lnbmVkIGludGVnZXIgdGhhdCBkZXRl cm1pbmVzIGhvdyBtYW55IHJlY29yZHMgY2FuIGJlIGJ1ZmZlcmVkIHRvIGRpc2sgb3IgaW4gbWVt b3J5IGJlZm9yZSBjb25zaWRlcmluZyBpdCB0byBiZSBhIGZhaWx1cmUgc2VuZGluZy4gVGhpcyBw YXJhbWV0ZXIgYWZmZWN0cyB0aGUK ------=_Part_493014_308825656.1300973888444 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------=_Part_493014_308825656.1300973888444--