;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2019 Danny Milosavljevic <dannym@scratchpost.org>
;;; Copyright © 2020 Robin Green <greenrd@greenrd.org>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (gnu services auditd)
  #:use-module (gnu services)
  #:use-module (gnu services configuration)
  #:use-module (gnu services base)
  #:use-module (gnu services shepherd)
  #:use-module (gnu packages admin)
  #:use-module (guix records)
  #:use-module (guix gexp)
  #:use-module (guix packages)
  #:export (auditd-configuration
            auditd-service-type
            %default-auditd-configuration-directory))

(define auditd.conf
  (plain-file "auditd.conf" "log_file = /var/log/audit.log\nlog_format = \
ENRICHED\nfreq = 1\nspace_left = 5%\nspace_left_action = \
syslog\nadmin_space_left_action = ignore\ndisk_full_action = \
ignore\ndisk_error_action = syslog\n"))

(define %default-auditd-configuration-directory
  (computed-file "auditd"
                 #~(begin
                     (mkdir #$output)
                     (copy-file #$auditd.conf
                                (string-append #$output "/auditd.conf")))))

(define-record-type* <auditd-configuration>
  auditd-configuration make-auditd-configuration
  auditd-configuration?
  (audit                   auditd-configuration-audit                          ; file-like
                           (default audit))
  (configuration-directory auditd-configuration-configuration-directory))      ; file-like

(define (auditd-shepherd-service config)
  (let* ((audit (auditd-configuration-audit config))
         (configuration-directory (auditd-configuration-configuration-directory config)))
    (list (shepherd-service
           (documentation "Auditd allows you to audit file system accesses and process execution.")
           (provision '(auditd))
           (start #~(make-forkexec-constructor
                     (list (string-append #$audit "/sbin/auditd") "-c" #$configuration-directory)
                     #:pid-file "/var/run/auditd.pid"))
           (stop #~(make-kill-destructor))))))

(define auditd-service-type
  (service-type (name 'auditd)
                (description "Allows auditing file system accesses and process execution.")
                (extensions
                 (list
                  (service-extension shepherd-root-service-type
                                     auditd-shepherd-service)))
                (default-value
                  (auditd-configuration
                   (configuration-directory %default-auditd-configuration-directory)))))
'/guix/commit/po/doc/local.mk?id=7bc46ecc34ceb042ff890e5d306d0a2a736e891d'>doc: Add Guix Cookbook.</a><span class='msg-avail'>...</span></td><td>Ricardo Wurmus</td></tr>
<tr><td><span title='2019-05-13 10:46:03 +0200'>2019-05-13</span></td><td><a href='/guix/commit/po/doc/local.mk?id=3bac7e6495934de9913e6186d954d1331883e064'>doc: Add Russian translation.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-04-30 18:11:15 +0200'>2019-04-30</span></td><td><a href='/guix/commit/po/doc/local.mk?id=81824af6a4b30368ed497686976c26f742bc6c8a'>build: 'guix-manual.*.po' no longer depends on 'guix-manual.pot'.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-04-29 22:21:14 +0200'>2019-04-29</span></td><td><a href='/guix/commit/po/doc/local.mk?id=842a687264e4dd88e4aa7f608582d6adc0313a07'>maint: Mark 'doc-pot-update' and 'doc-po-update' as phony.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-04-24 00:27:51 +0200'>2019-04-24</span></td><td><a href='/guix/commit/po/doc/local.mk?id=de712e5286137c297de8270d3396b8daa9a93c66'>doc: Add Simplified Chinese translation.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2019-04-23 23:56:16 +0200'>2019-04-23</span></td><td><a href='/guix/commit/po/doc/local.mk?id=6227e1b7477b71f31ea3bf8a74c32fe7238dcece'>doc: Add Spanish translation.</a><span class='msg-avail'>...</span></td><td>Miguel Ángel Arruga Vivas</td></tr>
<tr><td><span title='2018-11-28 22:23:55 +0100'>2018-11-28</span></td><td><a href='/guix/commit/po/doc/local.mk?id=7565d40e1e583b35148088bcf79760b9f95f91d9'>nls: Update documentation po and pot with `make dist`.</a><span class='msg-avail'>...</span></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2018-11-01 12:36:47 +0100'>2018-11-01</span></td><td><a href='/guix/commit/po/doc/local.mk?id=1e40e70bfebba47ccea354ddf862276d2c4223ea'>doc: Add German translation.</a><span class='msg-avail'>...</span></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2018-04-29 21:42:14 +0200'>2018-04-29</span></td><td><a href='/guix/commit/po/doc/local.mk?id=39764ef893b7b65a8ce55e13746fed8fd0bad6e0'>build: Use only one domain for guix-manual.</a><span class='msg-avail'>...</span></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2018-04-19 21:32:07 +0200'>2018-04-19</span></td><td><a href='/guix/commit/po/doc/local.mk?id=bf5c74e713c623cbb0001eb36af6998e92243482'>gnu: doc: Add French documentation.</a><span class='msg-avail'>...</span></td><td>Julien Lepiller</td></tr>
<tr><td><span title='2018-04-19 21:30:30 +0200'>2018-04-19</span></td><td><a href='/guix/commit/po/doc/local.mk?id=b9fe8fd662180e64156d2b95a671242c20f0acfc'>gnu: doc: Allow documentation to be translated.</a><span class='msg-avail'>...</span></td><td>Julien Lepiller</td></tr>