Date: Sat, 1 Dec 2012 22:12:24 +0000 From: "Simon L. B. Nielsen" <simon@FreeBSD.org> To: Andreas Tobler <andreast-list@fgznet.ch> Cc: Robert Watson <rwatson@freebsd.org>, current@freebsd.org, security@freebsd.org Subject: Re: Distributed audit daemon committed (was: svn commit: r243752 - in head: etc etc/defaults etc/mail etc/mtree etc/rc.d share/man/man4 usr.sbin usr.sbin/auditdistd (fwd)) Message-ID: <CAC8HS2GFh5P53t8FwbMkt8_FPW8t7T9jXK%2BWbduKiR5quV42rQ@mail.gmail.com> In-Reply-To: <50BA7158.1040302@fgznet.ch> References: <alpine.BSF.2.00.1212011512410.34256@fledge.watson.org> <50BA7158.1040302@fgznet.ch>
next in thread | previous in thread | raw e-mail | index | archive | help
On 1 December 2012 21:06, Andreas Tobler <andreast-list@fgznet.ch> wrote: > On 01.12.12 16:15, Robert Watson wrote: >> >> Dear all: >> >> I've now committed the build glue required to install the recently merged >> Audit Distribution Daemon (auditdistd) contributed by the Pawel Dawidek, and >> sponsored by the FreeBSD Foundation. This allows individual hosts generating >> audit trails to submit trails to a central audit server for review and safe >> keeping. Part of the goal is to ensure that a host submitting trail data >> can't later modify the trails. Pawel uses a variety of useful security- and >> resilience-related features such as TLS, Capsicum, etc, in auditdistd. As the >> recent security incident in the FreeBSD.org cluster illustrated, having >> reliable and detailed audit trails makes a big difference in forensic work, >> and hopefully this will allow the FreeBSD Project (and our users) to do that >> better in the future. > > Aehm, hope it is ok to 'complain' here. > > Happens when installing world. > > cd /export/devel/fbsd/head/src; > /usr/obj/export/devel/fbsd/head/src/make.amd64/make -f Makefile.inc1 > LOCAL_MTREE= hierarchy > cd /export/devel/fbsd/head/src/etc; > /usr/obj/export/devel/fbsd/head/src/make.amd64/make distrib-dirs > mtree -eU -f /export/devel/fbsd/head/src/etc/mtree/BSD.root.dist -p / > mtree -eU -f /export/devel/fbsd/head/src/etc/mtree/BSD.var.dist -p /var > mtree: line 22: unknown user auditdistd > *** [distrib-dirs] Error code 1 Did you remember mergemaster -p before installworld? -- Simon L. B. Nielsen
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAC8HS2GFh5P53t8FwbMkt8_FPW8t7T9jXK%2BWbduKiR5quV42rQ>