Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 06 Dec 2006 15:25:11 -0800
From:      Doug Barton <dougb@FreeBSD.org>
To:        Robert Watson <rwatson@FreeBSD.org>
Cc:        cvs-src@FreeBSD.org, src-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/etc/rc.d auditd
Message-ID:  <45775157.4030900@FreeBSD.org>
In-Reply-To: <200609241731.k8OHV5mZ053132@repoman.freebsd.org>
References:  <200609241731.k8OHV5mZ053132@repoman.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Catching up on some old mail ...

Robert Watson wrote:
> rwatson     2006-09-24 17:31:04 UTC
> 
>   FreeBSD src repository
> 
>   Modified files:
>     etc/rc.d             auditd 
>   Log:
>   Sleep for one second after calling audit -t to give the audit daemon a
>   chance to actually terminate the audit service and exit.  Otherwise, on
>   an rc.d/auditd restart, the new audit daemon instance may try to start
>   auditing while the previous session is still running.  Likewise, this
>   ensures a chance for auditd to terminate the audit trail at system
>   shutdown.
>   
>   Perhaps more ideally, the script would wait synchronously for auditd to
>   exit rather than for an arbitrary but short period of time.
>   
>   MFC after:      3 days
>   Obtained from:  TrustedBSD Project
>   
>   Revision  Changes    Path
>   1.3       +1 -0      src/etc/rc.d/auditd
> 
> http://www.FreeBSD.org/cgi/cvsweb.cgi/src/etc/rc.d/auditd.diff?&r1=1.2&r2=1.3&f=h

Perhaps a better change would be:

/usr/sbin/audit -t
while : ; do
	if <something that indicates audit is not dead yet>; then
		echo 'Waiting for the audit system to terminate'
		sleep 1
	else
		break
	fi
done

hth,

Doug

-- 

    This .signature sanitized for your protection




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?45775157.4030900>