From owner-soc-status@freebsd.org Mon Jun 8 10:59:50 2020 Return-Path: Delivered-To: soc-status@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 148AA32B984 for ; Mon, 8 Jun 2020 10:59:50 +0000 (UTC) (envelope-from shivankgarg98@gmail.com) Received: from mail-ej1-f45.google.com (mail-ej1-f45.google.com [209.85.218.45]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 49gVdJ6RTNz4DK5; Mon, 8 Jun 2020 10:59:48 +0000 (UTC) (envelope-from shivankgarg98@gmail.com) Received: by mail-ej1-f45.google.com with SMTP id a25so17783053ejg.5; Mon, 08 Jun 2020 03:59:48 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=zkY/x/5mgyg3MUcOp8D6uLSKw+9cLokJ2iuynKdIdTo=; b=iJtaW3+acD0hD+fRi4mUIcQES/r4+/7o8ORrpQdS8Mg/OmtEy3WxJPd/HTo96hm+eN pslqJNjinhpY5p+PzyKIYz4PIO9eaX6cPSwHbhxJeDz9O7Hi5sQb8Sm+uZuxf+5BSOqw cc9WxmDTtEtD88A/yexQ33qg4BAtS7Mx8f6rrcoMTFi1bSwSzJgOMkbb4CnAG7hAZESI hrOkD+oBe1Cn6IREWRnkGXuihOl3Kp/B6ETLfB+FG/ARmjxHkpRmxLhGs1jl82iSqQB6 6WlsViuoYnR89wyXTwhzexQI5La5JgIwtDF6UWeeGMDnMHl3A2Qx4BKE2+rOmJCjOWxa AlbQ== X-Gm-Message-State: AOAM533ObmFLD/zChQVczhkK6qsWwt7OU3VRJAvDNZnZv1bT8RdSZmJ7 VU689YrMJ5ObwbEl47+3Ot3UxSzxRJA= X-Google-Smtp-Source: ABdhPJwVfa9p0bbwMTd9XEfm9GVZrCwE/OUg1n75RjZciVMBUl/pxEF5y2lYa5yGswZ+fTSXHMDgPw== X-Received: by 2002:a17:906:95d6:: with SMTP id n22mr18732306ejy.138.1591613987083; Mon, 08 Jun 2020 03:59:47 -0700 (PDT) Received: from mail-ej1-f52.google.com (mail-ej1-f52.google.com. [209.85.218.52]) by smtp.gmail.com with ESMTPSA id f19sm11975874edq.14.2020.06.08.03.59.46 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 08 Jun 2020 03:59:46 -0700 (PDT) Received: by mail-ej1-f52.google.com with SMTP id o15so17742370ejm.12; Mon, 08 Jun 2020 03:59:46 -0700 (PDT) X-Received: by 2002:a17:906:a402:: with SMTP id l2mr21413595ejz.14.1591613986398; Mon, 08 Jun 2020 03:59:46 -0700 (PDT) MIME-Version: 1.0 From: Shivank Garg Date: Mon, 8 Jun 2020 16:29:30 +0530 X-Gmail-Original-Message-ID: Message-ID: Subject: [GSoC'20 Weekly Update] Adding audit(4) support to NFS To: soc-status@freebsd.org Cc: Alan Somers X-Rspamd-Queue-Id: 49gVdJ6RTNz4DK5 X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of shivankgarg98@gmail.com designates 209.85.218.45 as permitted sender) smtp.mailfrom=shivankgarg98@gmail.com X-Spamd-Result: default: False [-1.48 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_TLS_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:209.85.128.0/17:c]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; DMARC_NA(0.00)[freebsd.org]; NEURAL_HAM_LONG(-0.89)[-0.894]; RWL_MAILSPIKE_GOOD(0.00)[209.85.218.45:from]; NEURAL_SPAM_SHORT(0.29)[0.285]; RCVD_COUNT_THREE(0.00)[4]; NEURAL_HAM_MEDIUM(-0.88)[-0.875]; RCPT_COUNT_TWO(0.00)[2]; RCVD_IN_DNSWL_NONE(0.00)[209.85.218.45:from]; FORGED_SENDER(0.30)[shivank@freebsd.org,shivankgarg98@gmail.com]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; ASN(0.00)[asn:15169, ipnet:209.85.128.0/17, country:US]; FROM_NEQ_ENVFROM(0.00)[shivank@freebsd.org,shivankgarg98@gmail.com]; FREEMAIL_ENVFROM(0.00)[gmail.com] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.33 X-BeenThere: soc-status@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: Summer of Code Status Reports and Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jun 2020 10:59:50 -0000 Hi, This project aims to add audit(4) support to NFS, which will allow auditd(8) to just run on the NFS server and audit all activities within the NFS network. Audit works mostly on the syscall level and NFS is implemented within the kernel, which means the NFS RPCs don't generate any audit records on the server. Note that audit(4) can still be used on the NFS network but auditd(8) must run on every NFS client. Til now I made the following progress: * set-up a development environment for NFS client and server. * Familiarized me with the NFS and Audit source code, documentation, and usage. Currently, I am: * coming up with the design for audit. * Experimenting with code to see if it works as expected. Please, do Check this project on Github: https://github.com/shivankgarg98/freebsd/tree/user/shivank/nfs_audit Project wiki: https://wiki.freebsd.org/SummerOfCode2020Projects/AddAuditSupportToNFS Please feel free to share your ideas and feedback on this project. Best Regards, Shivank Garg