Date: Sat, 4 Mar 2006 17:35:22 +0000 (GMT) From: Robert Watson <rwatson@FreeBSD.org> To: trustedbsd-audit@TrustedBSD.org Subject: OpenBSM 1.0 alpha 5 tarball now on the web site. Message-ID: <20060304173111.O61086@fledge.watson.org>
next in thread | raw e-mail | index | archive | help
I've now put the OpenBSM 1.0 alpha 5 tarball up on the www.TrustedBSD.org web
site:
http://www.TrustedBSD.org/openbsm.html
I've attached a list of changes present in alpha 5 at the end of this message.
The primary change is that we've moved from using BSD make to GNU
autoconf/automake for the build and portability infrastructure. Many thanks
to Martin Fong for working with me to get the Tiger build up and running,
which it now appears to be.
The source code base also now builds out of the box on my Fedora Core release
3 box, although it has not seen much testing on Linux. As Linux doesn't
support the various audit system calls, we only build the audit trail printing
and reduction tools, and the library omits API calls that submit audit records
to the kernel.
As of today, I've also imported OpenBSM 1.0 alpha 5 into the FreeBSD 7.x
source tree. It continues to use the integrated BSD make build infrastructure
in FreeBSD, and the plan is to continue to do so.
Robert N M Watson
OpenBSM 1.0 alpha 5
- Update install notes to indicate /etc files are to be installed manually.
- On systems without LOG_SECURITY, use LOG_AUTH.
- Convert to autoconf/automake in order to move to a more portable (not
BSD-specific) build infrastructure, and more easy conditional building of
components. Currently, the primary feature loss is that automake does
not have native support for manual symlinks. This will be addressed in a
future OpenBSM release.
- Add compat/queue.h, to be used on systems dated BSD queue macro libraries
(as found on Linux).
- Rename CHANGELOG to HISTORY, as our change log doesn't follow some of the
existing conventions for a CHANGELOG.
- Some private data structures moved from audit.h to audit_internal.h to
prevent inappropriate use by applications and name space pollution.
- Improved detection and use of endian macros using autoconf.
- Avoid non-portable use of struct in6_addr, which is largely opaque.
- Avoid leaking BSD kernel socket related token code to user space in
bsm_token.c.
- Teach System V IPC calls to look for Linux naming variations for certain
struct ipc_perm fields.
- Test for audit system calls, and if not present, don't build
bsm_wrappers.c, bsm_notify.c, audit(8), and auditd(8), which rely on
those system calls.
- au_close() is not implemented on systems that don't have audit system
calls, but au_close_buffer() is.
- Work around missing BSDisms in bsm_wrapper.c.
- Fix nested includes so including libbsm.h in an application on Linux
picks up the necessary definitions.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060304173111.O61086>