1- Teach praudit how to general XML format BSM streams.
2- Teach libbsm about any additional 64-bit token types that are present
3 in more recent Solaris versions.
4- Build a regression test suite for libbsm that generates each token
5 type and then compares the results with known good data. Make sure to
6 test that things work properly with respect to endianness of the local
7 platform.
8- Document contents of libbsm "public" data structures in libbsm man pages.
9- The audit.log.5 man page is incomplete, as it does not describe all
10 token types.
11- With the move to autoconf/automake, man page symlinks are no longer
12 installed. This needs to be fixed.
13- It might be desirable to be able to provide EOPNOTSUPP system call stubs
14 on systems that don't have the necessary audit system calls; that would
15 allow the full libbsm and tool set to build, just not run.
16- Teach praudit how to begin printing at any point in a token stream, not
17 just at the beginning of a record. This will make it easier to use
18 praudit in test suites processing single-token files without header and
19 trailer context.
| 1- Teach praudit how to general XML format BSM streams.
2- Teach libbsm about any additional 64-bit token types that are present
3 in more recent Solaris versions.
4- Build a regression test suite for libbsm that generates each token
5 type and then compares the results with known good data. Make sure to
6 test that things work properly with respect to endianness of the local
7 platform.
8- Document contents of libbsm "public" data structures in libbsm man pages.
9- The audit.log.5 man page is incomplete, as it does not describe all
10 token types.
11- With the move to autoconf/automake, man page symlinks are no longer
12 installed. This needs to be fixed.
13- It might be desirable to be able to provide EOPNOTSUPP system call stubs
14 on systems that don't have the necessary audit system calls; that would
15 allow the full libbsm and tool set to build, just not run.
16- Teach praudit how to begin printing at any point in a token stream, not
17 just at the beginning of a record. This will make it easier to use
18 praudit in test suites processing single-token files without header and
19 trailer context.
|
20- Teach auditd how to notify a script when it is done with trail files so
21 that the script can archive them, compress them, delete them, whatever.
22 It should walk any trail files found at startup also, assuming it
23 successfully registers.
| |
24- Put hostname in trail file name.
| 20- Put hostname in trail file name.
|
| 21- Document audit_warn event arguments.
|
25
| 22
|
26$P4: //depot/projects/trustedbsd/openbsm/TODO#7 $
| 23$P4: //depot/projects/trustedbsd/openbsm/TODO#8 $
|
| |