From mboxrd@z Thu Jan 1 00:00:00 1970 From: Klaus Heinrich Kiwi Subject: Audit plug-ins development Date: Tue, 07 Aug 2007 11:10:07 -0300 Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7Bit Return-path: Received: from mx2.redhat.com (mx2.redhat.com [10.255.15.25]) by int-mx2.corp.redhat.com (8.13.1/8.13.1) with ESMTP id l77EAMXM020573 for ; Tue, 7 Aug 2007 10:10:22 -0400 Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) by mx2.redhat.com (8.13.1/8.13.1) with ESMTP id l77EAGWq010767 for ; Tue, 7 Aug 2007 10:10:17 -0400 Received: from list by ciao.gmane.org with local (Exim 4.43) id 1IIPlG-0001Gp-Nh for linux-audit@redhat.com; Tue, 07 Aug 2007 16:10:14 +0200 Received: from 32.104.18.243 ([32.104.18.243]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Tue, 07 Aug 2007 16:10:14 +0200 Received: from klausk by 32.104.18.243 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Tue, 07 Aug 2007 16:10:14 +0200 List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com Steve, I'm interested in developing an audit plug-in to forward events to z/OS RACF (sort of a centralized AAA facility for IBM System Z systems). I know that the [new] audit dispatcher and the whole audit infrastructure isn't quite ready yet, but I'd like to start advancing things on my side. What is your general idea for audit plug-ins deploymet? Would we be able to contribute the plug-ins to the audit userspace so that they can be available in the audit source package, and then maybe in a separate binary package upon building? Can you give us some hints about how would you want this code contributions and how would you want these blended in the audit tree? Thanks, Klaus K. -- .:klaus h kiwi :.