From owner-freebsd-current@FreeBSD.ORG Sat Dec 1 22:09:21 2012 Return-Path: Delivered-To: current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 5EDD7EAA; Sat, 1 Dec 2012 22:09:21 +0000 (UTC) (envelope-from andreast-list@fgznet.ch) Received: from smtp.fgznet.ch (mail.fgznet.ch [81.92.96.47]) by mx1.freebsd.org (Postfix) with ESMTP id D9ADA8FC08; Sat, 1 Dec 2012 22:09:20 +0000 (UTC) Received: from deuterium.andreas.nets (dhclient-91-190-14-19.flashcable.ch [91.190.14.19]) by smtp.fgznet.ch (8.13.8/8.13.8/Submit_SMTPAUTH) with ESMTP id qB1M9B6Q087505; Sat, 1 Dec 2012 23:09:16 +0100 (CET) (envelope-from andreast-list@fgznet.ch) Message-ID: <50BA8007.5030501@fgznet.ch> Date: Sat, 01 Dec 2012 23:09:11 +0100 From: Andreas Tobler User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:16.0) Gecko/20121026 Thunderbird/16.0.2 MIME-Version: 1.0 To: Chris Rees Subject: Re: Distributed audit daemon committed References: <50BA7158.1040302@fgznet.ch> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Scanned-By: MIMEDefang 2.64 on 81.92.96.47 Cc: Robert Watson , current@freebsd.org, security@freebsd.org X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 01 Dec 2012 22:09:21 -0000 On 01.12.12 22:53, Chris Rees wrote: > > On 1 Dec 2012 21:51, "Andreas Tobler" > wrote: >> >> On 01.12.12 16:15, Robert Watson wrote: >> > >> > Dear all: >> > >> > I've now committed the build glue required to install the recently > merged >> > Audit Distribution Daemon (auditdistd) contributed by the Pawel > Dawidek, and >> > sponsored by the FreeBSD Foundation. This allows individual hosts > generating >> > audit trails to submit trails to a central audit server for review > and safe >> > keeping. Part of the goal is to ensure that a host submitting trail > data >> > can't later modify the trails. Pawel uses a variety of useful > security- and >> > resilience-related features such as TLS, Capsicum, etc, in > auditdistd. As the >> > recent security incident in the FreeBSD.org cluster illustrated, having >> > reliable and detailed audit trails makes a big difference in > forensic work, >> > and hopefully this will allow the FreeBSD Project (and our users) to > do that >> > better in the future. >> >> Aehm, hope it is ok to 'complain' here. >> >> Happens when installing world. >> >> cd /export/devel/fbsd/head/src; >> /usr/obj/export/devel/fbsd/head/src/make.amd64/make -f Makefile.inc1 >> LOCAL_MTREE= hierarchy >> cd /export/devel/fbsd/head/src/etc; >> /usr/obj/export/devel/fbsd/head/src/make.amd64/make distrib-dirs >> mtree -eU -f /export/devel/fbsd/head/src/etc/mtree/BSD.root.dist -p / >> mtree -eU -f /export/devel/fbsd/head/src/etc/mtree/BSD.var.dist -p /var >> mtree: line 22: unknown user auditdistd >> *** [distrib-dirs] Error code 1 > > Does mergemaster -p help? Hey, thank you! I'm now able to installworld. Andreas