Re: auditd as logrotate replacement?

2001-04-26 Thread Alejo Sanchez
Julian Gilbey wrote:
> 
> On Wed, Apr 25, 2001 at 08:35:51PM -0300, Alejo Sanchez wrote:
> > well, your version would do it the dlopen() way.
> > actually we were going to ask if there was a
> > restriction on depending on dlopen(), as it could
> > be possible on some non-dynamic plataforms.
> > (no shared libraries, no dl library)
> 
> You could look at libltdl from the libtool suite.  I guess you could
> always use configure tests to figure this sort of stuff out.
> 
>Julian

I was only asking if release applications from debian
are allowed to have dlopen() (even if it isn't used
on most situations)

AFAIK some OS don't, ie. OpenBSD.

Alejo




Re: auditd as logrotate replacement?

2001-04-25 Thread Alejo Sanchez
Sean 'Shaleh' Perry wrote:
> 
> >
> > What it does use for crypto is openssl's libcrypt,
> > wich is NOT needed when used as a simple (traditional)
> > rotate system. So Debian can ship audit[d], and if
> > a user wants it's advanced crypto support, she/he should
> > install openssl package.
> >
> 
> does it dlopen this? in other words, if I have a system without openssl
> installed will auditd still work?  If so, sounds like it can indeed live in
> main.

well, your version would do it the dlopen() way.
actually we were going to ask if there was a
restriction on depending on dlopen(), as it could
be possible on some non-dynamic plataforms.
(no shared libraries, no dl library)

Alejo




Re: auditd as logrotate replacement?

2001-04-25 Thread Alejo Sanchez
"Steve M. Robbins" wrote:
> 
> On Wed, Apr 25, 2001 at 01:03:03PM -0700, Sean 'Shaleh' Perry wrote:
> 
> > Since it is in non-us, at least for now that means it will not appear on a
> > official debian cd.
> 
> When I burned the 2.2r2 iso's last December, there was both a
> "crippled" and a "non-us" ISO for the first CD ("binary-i386-1").
> 
> Both were "official" debian CDs, as I recall.  Has this changed?
> 
> -S

Hi,

Audit[d] has no crypto code itself. The only thing
are hash functions (md5, sha1, rmd160) wich are
not restricted for any export anywhere (and AFAIK
Debian has them already).

What it does use for crypto is openssl's libcrypt,
wich is NOT needed when used as a simple (traditional)
rotate system. So Debian can ship audit[d], and if
a user wants it's advanced crypto support, she/he should
install openssl package.

Also with using auditd you have support to log protection
through hashing, and many other things.

Feel free to ask me anything you please about audit[d]


Alejo