Date: Thu, 29 Jul 2010 15:00:20 -0500 From: Sergio Ligregni <ligregni@unixmexico.org> To: freebsd-hackers@freebsd.org Subject: Improvement for Distributed Audit Project Message-ID: <AANLkTi=ntPn67hcR8Sa9bT2cu64u-Gr5LMZMbKjy9EFH@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
I am Sergio Ligregni, from Mexico, I am currently working in the Distribute=
d
Audit Project at GSoC 2010, I want to ask your help in these things:
HELP NEEDED:
/*++++++++++++++++++++++*/
- which code should I base my development in getting parameters from a file=
?
(I've searched some audit.c, auditd_fbsd.c, auditd.c but not got the
function to do that, maybe I missed something), currently I have files like=
:
/var/audit
/var2/audit
1000
yes
53686
and got the parameters with sscanf, but the right way (the one I want to
know wich code to take as baseline):
dir:/var/audit /var2/audit
time: 1000
slave_dir: yes
port: 53686
and not to use sscanf (the avoiding of that function is a security concern
made by my mentor). I think I can do an algorithm to implement that, but
maybe there is a better/safer way to do in order to keeping the standard.
/*++++++++++++++++++++++*/
Currently I have this function to verify if a file is a trail, having it's
name, this is very poor and it needs to be improved, any ideas?
/*
* When exploring /var/audit/ (or the directory where the trails are), not
* all files are trails so we must ensure we will only deal with the ones
* that are trails.
*/
static int
is_audit_trail(char *path)
{
/*
* We have these posibilities, only the first one is allowed
* 20100619223115.20100619223131 20100619223131.not_terminated
* current
*/
if (strlen(path) =3D=3D 29 && path[14] =3D=3D '.' && isdigit(path[15])) {
/* XXX To improve this checking later */
return 1;
}
return 0;
}
/*++++++++++++++++++++++*/
By the way the Wiki and the Perforce Repository for this project are:
http://wiki.freebsd.org/SOC2010SergioLigregni
http://p4db.freebsd.org/depotTreeBrowser.cgi?FSPC=3D//depot/projects/soc201=
0/disaudit&HIDEDEL=3DNO
Thanks!
--=20
-----------------------------------------------------------
Sergio Andr=E9s Ligregni Arredondo
Estudiante Ingenier=EDa en Sistemas Computacionales, ITQ.
Is UNIX Hot Enough for You? | FreeBSD
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?AANLkTi=ntPn67hcR8Sa9bT2cu64u-Gr5LMZMbKjy9EFH>