similar to: Mission statement for LKAP(Linux Kernel Auditing Project)

Français ( "http://www.itcglobaltranslations.com/email/itcusa/french/index.html" ) - Español ( "http://www.itcglobaltranslations.com/email/itcusa/spanish/index.html" ) - Deutsch ( "http://www.itcglobaltranslations.com/email/itcusa/german/index.html" ) Hello, I got your details from the Internet. Apologies for the unsolicited contact. Our translation company, ITC

Hi, I have installed samba 3.0.4 on Redhat 9 with security = user , I would like to enable auditing which should only display which user has deleted files in a particular share, I have tried installing VFS Audit module, but that slow down the samba server very much, I am using samba server for large users around 250 users access resources on Samba server. Please help me out in setting up Auditing

I'd like to take a moment to thank the samba team for a painless upgrade from 2.0.2/3 to 2.0.4. configure, make, stop, install, start. It was a joy. Woo woo! I've updated for 2.0.4 the patches for my auditing system, the close command parameter and smbwebstatus. Everything should be accessible at http://www.reac.com/samba/ auditing: http://www.reac.com/samba/samba-audit.html This

I'm still a bit confused as to how control-d is interpreted in ssh vs telnet. The only thing I can figure is that telnet traps control-d as User_Exit or USER_Logout and ssh interprets it as EOF. If EOF is triggered, then the auditing subsystem doesnt care. The 'logout' command is only affected if you are NOT logged into the console. ==================== test_citi:/root # grep

I want to include common auditing functionality in my models. This involves storing the changes made to a model in a seperate table : I have created the functions in an Audit module : module Audit before_update :before_changes after_update :after_changes def before_changes old=self.class.find(id).attributes @changes=[] attributes.each do |key, val| if val != old[key]

Dear folks-- I always seem to find that I spend more than half my time making sure my input date is in the right form, properly aligned, with no bizarre features. You know the drill: five kinds of missing values, three of them documented. An alpha mistype in one numeric field turns 30,000 numbers into factor levels. SPSS conversion turns 250 factors nicely into R factors, except 3 have levels

Does anyone know of any Linux-based filesystem that does file-level auditing and logs based on username? Does ext2/3 do such auditing (stock or with patches)? I would like a filesystem that can be told to audit and log file deletions and log the username that deleted the file (similar to auditing on NTFS). I know, I should be using file permissions to prevent this type of deletion from

I'm, attempting to patch samba source with a auditing diff to have access to more thorough accounting of file usage. patch tool is GNU patch 2.5 samba source is samba-2.0.4b diff file is samba-audit-2.0.4.diff Red Hat Linux release 5.2 (Apollo) Kernel 2.2.3 on an i486 When patch is run from the correct location (the directory containing the source directory) using patch -p0 <

On Tue, Jul 12, 2016 at 11:07:04PM -0500, Arthur Ramsey wrote: > Hello, > > I'm looking for a way to log the following attributes for all > authentication activity (LDAP bind, Kerberos, SMB / CIFS, etc.). > > I would like to see: > > * Principle name (user name) > * Source IP > * Timestamp (including at least seconds if not milliseconds) > *

https://bugzilla.mindrot.org/show_bug.cgi?id=1642 Summary: Add user login auditing Product: Portable OpenSSH Version: 5.2p1 Platform: Other OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: unassigned-bugs at mindrot.org ReportedBy: jchadima at

Hello, I believe there may be a bug with accounts getting erroneously locked in v4.4.5+. I've checked at all the Internet facing services to find the source of account lockout and I've done packet captures at the DCs, but I cannot find the source of lockout. I've got several accounts locking out for seemingly no reason including some service accounts where the passwords

I''m looking for a way to generate some sort of logging/auditing of various events in my application, such as: - user logged in - user logged out - user clicked on a certain link - password attempt was wrong etc. For each, a numeric code along with some data (i.e. the username) would be great. Or even some sort of hash stored in the data field would be good. Another table could

Hello, I downloaded and compiled the Mar 2, 2005 snapshot and compiled it with bsm auditing for solaris turned on. I've been noticing about a dozen or so of the following messages per day now. Not sure exactly what it is, or if it is a big issue. Mar 3 13:46:10 machine_name sshd[15298]: [ID 800047 auth.crit] fatal: mm_request_send: write If it matters it is running on solaris 8

I am trying to build a static version of ssh, sshd and sftp, but after banging my head against the wall for the best part of the last 3 days I am about to give up... Since I plan to use this on an embedded device (building dropbear is *NOT* an option!), I've excluded as many openssh configure options as I can but, ultimately, failed. This is my setup: export LDFLAGS=' -pie -z relro -z

Hello, Space Shuttle Mission 2007 (http://www.space-shuttle-mission.com/) is awsome simulator I found missing in AppDB. Have anyone tried it? Unfortunately I have problem with it - mouse cursor is stuck within invisible rectangle, smaller then game screen surface. While using virtual desktop you can see that "real" mouse cursor moves out of game screen, but in-game cursor stays

HI all, So I'd like to log the user's operations on some shares. As I need to know who made what when. I'd read a previous answer from Andrew about auditing, so I can see loggued operations. Modified smb.conf : > [global] > vfs objects = dfs_samba4, acl_xattr, full_audit > full_audit:success =none > full_audit:failure = none share is : > [journal] > path =

Friends! I have recently discovered that chan_sip, chan_sip2 and chan_sipx all lack support of SIP multicast. This has a major impact on my network, since I haven't got the bandwidth needed to call all of you and send you this message. With that feature missing, I have to go back to old Internet communication methods and use e-mail instead:

Hi all, is it possible at all to get Samba 3 on AIX 5.2 to join a Win 2003 Domain natively ? All the precompiled versions do not have AD Support and having AIX krb5 installed (let alone using --with-ads)is enough to make a compile run fail - both 3.0.14 and 3.0.20rc2. Might Heimdal solve this ? Has ANYONE got a working installation ? Solving this would make quite a difference to my current life,

Folks, Given recent discussion on this list I have just updated the master Samba-Docs information regarding the Debug Class (Log Level) settings and the audit information each causes to be logged. This will appear in on-line versions of the Samba-HOWTO-Collection within 24 hours. To obtain an updated version point your browser at: http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf

Im trying to identify how ssh 4.5 interacts with the audit subsystem within AIX 5.3. i get an event when a user logs in, but not when they exit via ssh. i can get it to work with telnet, however. It would seem to me that if an event is captured from the login, that the same would be true for the logout. I've opened a PMR w/IBM, but not getting very much help. below is an example of my