1#! /sbin/sh
2#
3# CDDL HEADER START
4#
5# The contents of this file are subject to the terms of the
| 1#! /sbin/sh
2#
3# CDDL HEADER START
4#
5# The contents of this file are subject to the terms of the
|
6# Common Development and Distribution License, Version 1.0 only
7# (the "License"). You may not use this file except in compliance
8# with the License.
| 6# Common Development and Distribution License (the "License").
7# You may not use this file except in compliance with the License.
|
9#
10# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
11# or http://www.opensolaris.org/os/licensing.
12# See the License for the specific language governing permissions
13# and limitations under the License.
14#
15# When distributing Covered Code, include this CDDL HEADER in each
16# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
17# If applicable, add the following below this CDDL HEADER, with the
18# fields enclosed by brackets "[]" replaced with your own identifying
19# information: Portions Copyright [yyyy] [name of copyright owner]
20#
21# CDDL HEADER END
22#
23#
| 8#
9# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10# or http://www.opensolaris.org/os/licensing.
11# See the License for the specific language governing permissions
12# and limitations under the License.
13#
14# When distributing Covered Code, include this CDDL HEADER in each
15# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16# If applicable, add the following below this CDDL HEADER, with the
17# fields enclosed by brackets "[]" replaced with your own identifying
18# information: Portions Copyright [yyyy] [name of copyright owner]
19#
20# CDDL HEADER END
21#
22#
|
24# Copyright 2005 Sun Microsystems, Inc. All rights reserved.
| 23# Copyright 2006 Sun Microsystems, Inc. All rights reserved.
|
25# Use is subject to license terms.
26#
27# ident "%Z%%M% %I% %E% SMI"
28
29# if the audit state is "disabled" auditconfig returns
30# non-zero exit status unless the c2audit module is loaded;
31# if c2audit is loaded, "disabled" becomes "noaudit" early
32# in the boot cycle and "auditing" only after auditd starts.
33
34. /lib/svc/share/smf_include.sh
35
36AUDITCONFIG=/usr/sbin/auditconfig
| 24# Use is subject to license terms.
25#
26# ident "%Z%%M% %I% %E% SMI"
27
28# if the audit state is "disabled" auditconfig returns
29# non-zero exit status unless the c2audit module is loaded;
30# if c2audit is loaded, "disabled" becomes "noaudit" early
31# in the boot cycle and "auditing" only after auditd starts.
32
33. /lib/svc/share/smf_include.sh
34
35AUDITCONFIG=/usr/sbin/auditconfig
|
37ZONE=`/sbin/zonename`
| |
38
39AUDITCOND=`$AUDITCONFIG -getcond 2> /dev/null`
40
41if [ $? -ne 0 ]; then
42 # The decision whether to start
43 # auditing is driven by bsmconv / bsmunconv
44 /usr/sbin/svcadm mark maintenance system/auditd
45 exit $SMF_EXIT_MON_OFFLINE;
46fi
47
48# In a non-global zone, auditd is started only if the "perzone"
49# audit policy has been set.
| 36
37AUDITCOND=`$AUDITCONFIG -getcond 2> /dev/null`
38
39if [ $? -ne 0 ]; then
40 # The decision whether to start
41 # auditing is driven by bsmconv / bsmunconv
42 /usr/sbin/svcadm mark maintenance system/auditd
43 exit $SMF_EXIT_MON_OFFLINE;
44fi
45
46# In a non-global zone, auditd is started only if the "perzone"
47# audit policy has been set.
|
50if [ "$ZONE" != "global" ]; then
| 48if smf_is_nonglobalzone; then
|
51 echo `$AUDITCONFIG -getpolicy` | grep perzone > /dev/null
52
53 if [ $? -eq 1 ]; then
54 echo "$0: auditd is not configured to run in a local zone"
55 exit $SMF_EXIT_ERR_CONFIG;
56 fi
57fi
58
59/etc/security/audit_startup
60# daemon forks, parent exits when child says it's ready
61exec /usr/sbin/auditd
62
| 49 echo `$AUDITCONFIG -getpolicy` | grep perzone > /dev/null
50
51 if [ $? -eq 1 ]; then
52 echo "$0: auditd is not configured to run in a local zone"
53 exit $SMF_EXIT_ERR_CONFIG;
54 fi
55fi
56
57/etc/security/audit_startup
58# daemon forks, parent exits when child says it's ready
59exec /usr/sbin/auditd
60
|