From owner-trustedbsd-audit@FreeBSD.ORG  Mon Nov 13 15:23:19 2006
Return-Path: <owner-trustedbsd-audit@FreeBSD.ORG>
X-Original-To: trustedbsd-audit@freebsd.org
Delivered-To: trustedbsd-audit@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id AA98E16A6E5
	for <trustedbsd-audit@freebsd.org>;
	Mon, 13 Nov 2006 15:23:19 +0000 (UTC)
	(envelope-from martin_voros@yahoo.com)
Received: from web55504.mail.re4.yahoo.com (web55504.mail.re4.yahoo.com
	[206.190.58.213])
	by mx1.FreeBSD.org (Postfix) with SMTP id 3EE8B4415A
	for <trustedbsd-audit@freebsd.org>;
	Mon, 13 Nov 2006 15:13:55 +0000 (GMT)
	(envelope-from martin_voros@yahoo.com)
Received: (qmail 26311 invoked by uid 60001); 13 Nov 2006 15:13:41 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com;
	h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;
	b=xl8EIHPMpwFtTq3YTriyL3JhVylLKEhEY//EKDYSsbYFEqH1ezXBbQ3kMN4Sp/GWQPcrxgaykqXz0UxEmuCuZDil62voDwzJKRusT/5xFyfehvXj8jsWJwMOaMTQOn6SI96F9+a60ybInLqsho0/PaHXzG8q0fuuBNPhXV4Klm0=
	; 
Message-ID: <20061113151341.26309.qmail@web55504.mail.re4.yahoo.com>
Received: from [193.136.122.18] by web55504.mail.re4.yahoo.com via HTTP;
	Mon, 13 Nov 2006 07:13:41 PST
Date: Mon, 13 Nov 2006 07:13:41 -0800 (PST)
From: Martin Voros <martin_voros@yahoo.com>
To: trustedbsd-audit@freebsd.org
In-Reply-To: <1b0798830611121359r877d4ces5182f1ec1eb2b646@mail.gmail.com>
MIME-Version: 1.0
X-Mailman-Approved-At: Mon, 13 Nov 2006 18:58:02 +0000
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Cc: 
Subject: Re: Additional 64-bit token types to libbsm
X-BeenThere: trustedbsd-audit@FreeBSD.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: TrustedBSD Audit Discussion List <trustedbsd-audit.FreeBSD.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/trustedbsd-audit>, 
	<mailto:trustedbsd-audit-request@FreeBSD.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/trustedbsd-audit>
List-Post: <mailto:trustedbsd-audit@FreeBSD.org>
List-Help: <mailto:trustedbsd-audit-request@FreeBSD.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/trustedbsd-audit>, 
	<mailto:trustedbsd-audit-request@FreeBSD.org?subject=subscribe>
X-List-Received-Date: Mon, 13 Nov 2006 15:23:19 -0000

Hi,

Diego Giagio <dgiagio@gmail.com> wrote: On 11/11/06, Diego Giagio  wrote:
> Hi,
>
> I've been looking at OpenBSM 1.0a12 distribution's TODO list and would
> like to start contributing. The first item on the list appears to have
> already been commited (praudit with XML output) so I'm skipping it.
> The next one is for adding support for some newer 64-bit tokens to
> libbsm. Is there anyone already working on this one?

Well, since I received no answer I created myself a patch to implement
some 64-bit tokens that were ENOTSUP on the distribution. They are:

au_to_attr64
au_to_process64
au_to_process64_ex
au_to_subject64
au_to_subject64_ex
au_to_header64 (and newly created au_to_header64_tm)

The tokens were based on existing tokens (*32) and OpenSolaris BSM
implementation.
The patch  applies to OPENBSM_1_0_ALPHA_12. It's not yet fully tested,
so be warned.

$ cd openbsm
$ patch -p1 < tokens64.patch
I think that you should also define output functions (bsm_io.c) in your patch, because now it's not possible to display new tokens by praudit.

Best regards 
MV
 
 
---------------------------------
Want to start your own business? Learn how on Yahoo! Small Business.