Le Thu, 24 Jul 2014 09:40:46 +0200, Andreas Henriksson <andr...@fatal.se> a écrit :
> Hello! Hello Andreas! > Some notes/to-be-investigated on enabling audit support in util-linux. > > The audit support seems to only affect the hwclock and login > binaries/utilities (in v2.25). > In debian the login utility is not built/used from util-linux, > so in practise only hwclock is affected. Maybe we should investigate switching some binaries like su and login from shadow to util-linux? Apparently RHEL/Centos/Fedora is building them from util-linux. But there are probably some differences between them. > > I found this message about audit support in hwclock (from 7 years > ago): "If you compile --with-audit the hwclock tool reports changes > in sys/hw clock to audit system. The real long-term and final > solution is probably add hooks for /dev/rtc to kernel, but it's not > implemented yet." Maybe the /dev/rtc hooks has appeared since? I'll ask to the linux-audit mailing list, they should know about this, but quickly trying "hwclock --set --date 10:40" doesn't show anything in the audit logs ATM. > > There's also this administrative detail to investigate: > The util-linux package is Priority: required > The libaudit1 package is Priority: optional > Should libaudit1 priority be raised to required first? It probably should be the case as systemd is also depending against libaudit and it will become require (or at least standard) soon I guess. Cheers, Laurent Bigonville -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
