From owner-soc-status@freebsd.org Fri Jul 10 04:37:31 2020 Return-Path: Delivered-To: soc-status@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id E662835E799 for ; Fri, 10 Jul 2020 04:37:31 +0000 (UTC) (envelope-from shivankgarg98@gmail.com) Received: from mail-ed1-x52d.google.com (mail-ed1-x52d.google.com [IPv6:2a00:1450:4864:20::52d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4B30dQ5Z2Dz44q0 for ; Fri, 10 Jul 2020 04:37:30 +0000 (UTC) (envelope-from shivankgarg98@gmail.com) Received: by mail-ed1-x52d.google.com with SMTP id dg28so3572693edb.3 for ; Thu, 09 Jul 2020 21:37:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=4nKCn8/GaJKdHlHmaNfMZDyMLCXxcRYY5pBHdNTLC9o=; b=BZWDcrX0tHJHNSRqBjTyt8yQ/IP25J8dnePjpdckYudHEJp7RCRmdtgYpewKNHbAWl DK135eq+wYUm/IKUnkcddIwdKm+ZzH4RpqIiLx6bwehr4TSBSbBE6PsgjjZAvvaFmJA5 34VnfAkCpVPCS/2ZCB1ZGte3NlSQUeOM99o6swhrPN9eX0YzRv/Jmukeaf7mnFKLCOha KKIWpZ2jHsxDJMJI1GvKya02q9nZ8zPeojy0AQmYkNHKLFsQdN92mvj2hw1cWrSUq/6v UgVRHiT1gFuuDpFKpa9NInJ9Wb17Ihdpl9A4WLQiEcYu2X7C6ZalzUhiBQKsqhw3Lw5Y scLA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=4nKCn8/GaJKdHlHmaNfMZDyMLCXxcRYY5pBHdNTLC9o=; b=MJDyxL1WHwZ2PF+NaiwgNXisI5ViYLzynXmCIpZK9rAE4M7kLpuIBkUy8yTheP4sv0 rJ6pSjR0sZdxw0E38ze+fK3dxWDeDv8yC4et/mU4VZR+Kra99jTTlOU3GcBQ9b0hkSXp fYgrPpnP1l5y75ZdGjlwwTihoGb8Rnnrhi7huwZjUWwwJGKcOs0gXj9su/HFQZD1pIZu WmBsDfTIGtA3w9Hn/4h7WmhY402lwDJwYd2T5YDiTmvgFuk1ShX6yN9rF3PvUUwOIycM xwjezlz1p/9kCwCYrgtRdsbPlCojPyb6zxHbIqrEHXMa1kXU8B0Lb3mh1qF99eCBZist IXzQ== X-Gm-Message-State: AOAM5322VG6nQSuRmOtiRHRWEHjvM9ieBPbTIB1EUE8Fqn4WMQaqpKVm a9q868UPKmcAP3KLkHobUfRAkuvYibBiWBUkB5WR2GBhMNk= X-Google-Smtp-Source: ABdhPJwCb+fit7ZKbbTlPFZ9GiwP5ICZxPwfHHUcKTzkE0nEKpLHw4mxW4Ql+MmXNeJ5Cb+5iwyVXatXsWcTcbgSFp8= X-Received: by 2002:aa7:d50d:: with SMTP id y13mr75208966edq.230.1594355848665; Thu, 09 Jul 2020 21:37:28 -0700 (PDT) MIME-Version: 1.0 From: Shivank Garg Date: Fri, 10 Jul 2020 10:07:12 +0530 Message-ID: Subject: [GSoC'20 Weekly Update] Adding audit(4) support to NFS To: soc-status@freebsd.org X-Rspamd-Queue-Id: 4B30dQ5Z2Dz44q0 X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=BZWDcrX0; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of shivankgarg98@gmail.com designates 2a00:1450:4864:20::52d as permitted sender) smtp.mailfrom=shivankgarg98@gmail.com X-Spamd-Result: default: False [-3.33 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-0.98)[-0.981]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36:c]; FREEMAIL_FROM(0.00)[gmail.com]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; PREVIOUSLY_DELIVERED(0.00)[soc-status@freebsd.org]; TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; NEURAL_HAM_LONG(-1.03)[-1.034]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::52d:from]; NEURAL_HAM_SHORT(-0.31)[-0.313]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.33 X-BeenThere: soc-status@freebsd.org X-Mailman-Version: 2.1.33 Precedence: list List-Id: Summer of Code Status Reports and Discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Jul 2020 04:37:32 -0000 Hi, This project aims to add audit(4) support to NFS, which will allow auditd(8) to just run on the NFS server and audit all activities within the NFS network. Audit works mostly on the syscall level and NFS is implemented within the kernel, which means the NFS RPCs don't generate any audit records on the server. Note that audit(4) can still be used on the NFS network but auditd(8) must run on every NFS client. This week I made the following progress: * add VNODE and UPATH tokens to NFSv3 RPCs and debugged issues related to it. * Read libnfs code and APIs for writing tests * Experimented with libnfs-raw APIs. Currently, I'm: * Writing tests with libnfs-raw APIs and Kyua-ATF. Please, do Check this project on Github: https://github.com/shivankgarg98/freebsd/tree/user/shivank/nfs_audit Project wiki: https://wiki.freebsd.org/SummerOfCode2020Projects/AddAuditSupportToNFS Please feel free to share your ideas and feedback on this project. Best Regards, Shivank Garg