From owner-freebsd-current@FreeBSD.ORG Sat Dec 1 22:12:26 2012 Return-Path: Delivered-To: current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 7AA1F2B6 for ; Sat, 1 Dec 2012 22:12:26 +0000 (UTC) (envelope-from simon@qxnitro.org) Received: from mail-la0-f54.google.com (mail-la0-f54.google.com [209.85.215.54]) by mx1.freebsd.org (Postfix) with ESMTP id D74328FC18 for ; Sat, 1 Dec 2012 22:12:25 +0000 (UTC) Received: by mail-la0-f54.google.com with SMTP id j13so1668262lah.13 for ; Sat, 01 Dec 2012 14:12:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qxnitro.org; s=google; h=mime-version:sender:x-originating-ip:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type; bh=UqAVa1Er64fTCIAytFddMjClI/oE/ZBJq2pAoDuupHs=; b=cfsEtshJbb6qOrjayq50qSMjcYOh4UaVRAQI0AUZRtONG9UPu2ZcRJ5u+mJTtnp8u1 af6TTtX/U8bH4zy9ZNcldUkybzgDR7g9XKiCj87gH60qizOV7fRM8XL3SsjY3IAqho4h mapA9qcFUX0RHVebsnREbgaxnyttBxwzcWTZ4= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:sender:x-originating-ip:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :x-gm-message-state; bh=UqAVa1Er64fTCIAytFddMjClI/oE/ZBJq2pAoDuupHs=; b=EydXX4huS/zNMCy/mJbCajWmq6gEPpyNt8YlqSm8fMGklgUZIKKgcMcNy5+VB0omlU JqL4ehSXl6p+H29ftAS9B9Db8i9XeTqqEis1pjTCxdsTRzdNye4mS+iO50tRSWgUfY11 uhBRVzSOdhY9YLdO2E+af7TBDDPVBjqZVLiMXo9CgxEa1XJ6TTcDffJeTgiaKAT0XkE7 M/gcGkVbq/BGHWzJfJFwCgHue4/tCn5jFqeZyXoDCTSlzFsMqR8Ty0EUC/mUEdgX7zn/ W2xdHbkaHSSV+1wOPGM2C6LNmFcA8rm6FVaruMmSYCrRf8mWzMDA8c3jVUwZ/5ktyJ8V cr4A== MIME-Version: 1.0 Received: by 10.112.8.37 with SMTP id o5mr2507271lba.135.1354399944305; Sat, 01 Dec 2012 14:12:24 -0800 (PST) Sender: simon@qxnitro.org Received: by 10.112.134.196 with HTTP; Sat, 1 Dec 2012 14:12:24 -0800 (PST) X-Originating-IP: [89.100.2.68] In-Reply-To: <50BA7158.1040302@fgznet.ch> References: <50BA7158.1040302@fgznet.ch> Date: Sat, 1 Dec 2012 22:12:24 +0000 X-Google-Sender-Auth: m9ht55Q3-0ka9njDeKQuPIexB8U Message-ID: Subject: Re: Distributed audit daemon committed (was: svn commit: r243752 - in head: etc etc/defaults etc/mail etc/mtree etc/rc.d share/man/man4 usr.sbin usr.sbin/auditdistd (fwd)) From: "Simon L. B. Nielsen" To: Andreas Tobler Content-Type: text/plain; charset=UTF-8 X-Gm-Message-State: ALoCoQmzwbO+MmfX4XcuQtXfpuFUFJgAiGNRMzsUv7+DKscJZ3I1V7Pz1Obyq/aYBaDvnsac5IDt Cc: Robert Watson , current@freebsd.org, security@freebsd.org X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 01 Dec 2012 22:12:26 -0000 On 1 December 2012 21:06, Andreas Tobler wrote: > On 01.12.12 16:15, Robert Watson wrote: >> >> Dear all: >> >> I've now committed the build glue required to install the recently merged >> Audit Distribution Daemon (auditdistd) contributed by the Pawel Dawidek, and >> sponsored by the FreeBSD Foundation. This allows individual hosts generating >> audit trails to submit trails to a central audit server for review and safe >> keeping. Part of the goal is to ensure that a host submitting trail data >> can't later modify the trails. Pawel uses a variety of useful security- and >> resilience-related features such as TLS, Capsicum, etc, in auditdistd. As the >> recent security incident in the FreeBSD.org cluster illustrated, having >> reliable and detailed audit trails makes a big difference in forensic work, >> and hopefully this will allow the FreeBSD Project (and our users) to do that >> better in the future. > > Aehm, hope it is ok to 'complain' here. > > Happens when installing world. > > cd /export/devel/fbsd/head/src; > /usr/obj/export/devel/fbsd/head/src/make.amd64/make -f Makefile.inc1 > LOCAL_MTREE= hierarchy > cd /export/devel/fbsd/head/src/etc; > /usr/obj/export/devel/fbsd/head/src/make.amd64/make distrib-dirs > mtree -eU -f /export/devel/fbsd/head/src/etc/mtree/BSD.root.dist -p / > mtree -eU -f /export/devel/fbsd/head/src/etc/mtree/BSD.var.dist -p /var > mtree: line 22: unknown user auditdistd > *** [distrib-dirs] Error code 1 Did you remember mergemaster -p before installworld? -- Simon L. B. Nielsen