From owner-freebsd-current@FreeBSD.ORG Wed Feb 1 22:14:13 2006 Return-Path: X-Original-To: current@FreeBSD.org Delivered-To: freebsd-current@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5E6BB16A420 for ; Wed, 1 Feb 2006 22:14:13 +0000 (GMT) (envelope-from rwatson@FreeBSD.org) Received: from cyrus.watson.org (cyrus.watson.org [209.31.154.42]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1A04543D45 for ; Wed, 1 Feb 2006 22:14:13 +0000 (GMT) (envelope-from rwatson@FreeBSD.org) Received: from fledge.watson.org (fledge.watson.org [209.31.154.41]) by cyrus.watson.org (Postfix) with ESMTP id 574C546C2C; Wed, 1 Feb 2006 17:13:59 -0500 (EST) Date: Wed, 1 Feb 2006 22:15:50 +0000 (GMT) From: Robert Watson X-X-Sender: robert@fledge.watson.org To: current@FreeBSD.org Message-ID: <20060201221213.L87763@fledge.watson.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: trustedbsd-audit@TrustedBSD.org Subject: HEADS UP: Audit integration into CVS in progress, some tree disruption X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Feb 2006 22:14:13 -0000 As Wayne and I are in the process of merging the TrustedBSD audit3 branch contents into the FreeBSD CVS HEAD (7-CURRENT), there may be periods where the tree is (hopefully briefly) unbuildable. This integration process will take a couple of days to complete, due to the scope of the changes. So far, the kernel audit framework has been committed (src/sys/security/audit), as has an initial vendor import of OpenBSM for user space (src/contrib/openbsm). What remains to be committed are the substantial changes to gather audit data in system calls, the mappings of system calls to audit events, and integration into the user space build and user space applications (such as login). These bits are the trickier bits as the patches are large and touch a lot of parts of the tree. I'll send out follow-up e-mail once the worst is past, along with information on what it all means, and how to try it out (for those not already on trustedbsd-audit, who have been hearing about this for a while). Robert N M Watson