;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2019 Danny Milosavljevic <dannym@scratchpost.org>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (gnu services auditd)
  #:use-module (gnu services)
  #:use-module (gnu services configuration)
  #:use-module (gnu services base)
  #:use-module (gnu services shepherd)
  #:use-module (gnu packages admin)
  #:use-module (guix records)
  #:use-module (guix gexp)
  #:use-module (guix packages)
  #:export (auditd-configuration
            auditd-service-type))

; /etc/audit/audit.rules

(define-configuration auditd-configuration
  (audit
   (package audit)
   "Audit package."))

(define (auditd-shepherd-service config)
  (let* ((audit (auditd-configuration-audit config)))
    (list (shepherd-service
           (documentation "Auditd allows you to audit file system accesses.")
           (provision '(auditd))
           (start #~(make-forkexec-constructor
                     (list (string-append #$audit "/sbin/auditd"))))
           (stop #~(make-kill-destructor))))))

(define auditd-service-type
  (service-type (name 'auditd)
                (description "Allows auditing file system accesses.")
                (extensions
                 (list
                  (service-extension shepherd-root-service-type
                                     auditd-shepherd-service)))
                (default-value (auditd-configuration))))
/a>/<a href='/guix/log/nix?id=e95d5ad958629d1f784f712a2ead6b0749165467'>nix</a>/<a href='/guix/log/nix/libutil?id=e95d5ad958629d1f784f712a2ead6b0749165467'>libutil</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/nix/libutil?id=e95d5ad958629d1f784f712a2ead6b0749165467&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2018-12-16 16:28:07 +0100'>2018-12-16</span></td><td><a href='/guix/commit/nix/libutil?id=8327e733966cc4a93dfaadd1a761ca1088078baa'>daemon: Use unbranded phrases in comments and messages.</a><span class='msg-avail'>...<span class='msg-tooltip'>* nix/libstore/build.cc, nix/libstore/globals.cc,
nix/libstore/gc.cc, nix/libstore/local-store.cc,
nix/libstore/optimise-store.cc, nix/libstore/store-api.cc,
nix/libutil/archive.cc, nix/nix-daemon/nix-daemon.cc: Replace "Nix
store" by "store", and "Nix daemon" by "build daemon".
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2018-10-02 23:08:30 +0200'>2018-10-02</span></td><td><a href='/guix/commit/nix/libutil?id=7eca7892014d173ff523417138b90aeff5b7dec1'>daemon: Remove "case hack" for nars.</a><span class='msg-avail'>...<span class='msg-tooltip'>This code has never been of any use in Guix.

* nix/libutil/archive.cc (useCaseHack): Remove.
(parse): Keep only the alternate branch in "if (useCaseHack)".
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2017-08-18 11:31:28 +0200'>2017-08-18</span></td><td><a href='/guix/commit/nix/libutil?id=ed464f48efd80e6439441d7a9f6d0e7988fb1272'>nix: Remove unused function.</a><span class='msg-avail'>...<span class='msg-tooltip'>* nix/libutil/util.hh:
* nix/libutil/util.cc (decodeOctalEscaped): Remove unused and buggy function.
</span></span></td><td>Andy Wingo</td></tr>
<tr><td><span title='2016-05-31 18:22:14 +0200'>2016-05-31</span></td><td><a href='/guix/commit/nix/libutil?id=75abbd0cbe2c42f07fa104f97bd206891eb576ef'>daemon: Remove unused XML output code.</a><span class='msg-avail'>...<span class='msg-tooltip'>* nix/local.mk (libutil_a_SOURCES): Remove libutil/xml-writer.cc.
(libutil_headers): Remove libutil/xml-writer.hh.
* nix/libutil/xml-writer.hh, nix/libutil/xml-writer.cc: Remove.
</span></span></td><td>Ludovic Courtès</td></tr>