aboutsummaryrefslogtreecommitdiff
path: root/gnu/services/auditd.scm
blob: 8a9292015fec488760921a83e21b71101726e769 (about) (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2019 Danny Milosavljevic <dannym@scratchpost.org>
;;;
;;; This file is part of GNU Guix.
;;;
;;; GNU Guix is free software; you can redistribute it and/or modify it
;;; under the terms of the GNU General Public License as published by
;;; the Free Software Foundation; either version 3 of the License, or (at
;;; your option) any later version.
;;;
;;; GNU Guix is distributed in the hope that it will be useful, but
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
;;; GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.

(define-module (gnu services auditd)
  #:use-module (gnu services)
  #:use-module (gnu services configuration)
  #:use-module (gnu services base)
  #:use-module (gnu services shepherd)
  #:use-module (gnu packages admin)
  #:use-module (guix records)
  #:use-module (guix gexp)
  #:use-module (guix packages)
  #:export (auditd-configuration
            auditd-service-type))

; /etc/audit/audit.rules

(define-configuration auditd-configuration
  (audit
   (package audit)
   "Audit package."))

(define (auditd-shepherd-service config)
  (let* ((audit (auditd-configuration-audit config)))
    (list (shepherd-service
           (documentation "Auditd allows you to audit file system accesses.")
           (provision '(auditd))
           (start #~(make-forkexec-constructor
                     (list (string-append #$audit "/sbin/auditd"))))
           (stop #~(make-kill-destructor))))))

(define auditd-service-type
  (service-type (name 'auditd)
                (description "Allows auditing file system accesses.")
                (extensions
                 (list
                  (service-extension shepherd-root-service-type
                                     auditd-shepherd-service)))
                (default-value (auditd-configuration))))
ise. * gnu/packages/texinfo.scm: Likewise. * gnu/packages/tls.scm: Likewise. * gnu/packages/tor.scm: Likewise. * gnu/packages/tv.scm: Likewise. * gnu/packages/valgrind.scm: Likewise. * gnu/packages/version-control.scm: Likewise. * gnu/packages/video.scm: Likewise. * gnu/packages/vpn.scm: Likewise. * gnu/packages/vtk.scm: Likewise. * gnu/packages/w3m.scm: Likewise. * gnu/packages/web.scm: Likewise. * gnu/packages/wicd.scm: Likewise. * gnu/packages/wm.scm: Likewise. * gnu/packages/xdisorg.scm: Likewise. * gnu/packages/xfce.scm: Likewise. * gnu/packages/xiph.scm: Likewise. * gnu/packages/xml.scm: Likewise. * gnu/packages/xorg.scm: Likewise. * gnu/packages/zip.scm: Likewise. Alex Kost 2016-03-10gnu: dropbear: Update to 2016.72 [fixes CVE-2016-3116]....* gnu/packages/ssh.scm (dropbear): Update to 2016.72. Leo Famulari 2016-03-10gnu: openssh: Update to 7.2p2 [fixes CVE-2016-3115]....* gnu/packages/ssh.scm (openssh): Update to 7.2p2. Leo Famulari 2016-03-01gnu: openssh: Update to 7.2p1....* gnu/packages/ssh.scm (openssh): Update to 7.2p1. Leo Famulari 2016-02-29gnu: curl: Use updated libssh2 [fixes CVE-2016-7087]....* gnu/packages/curl.scm (curl)[inputs]: Use libssh2. * gnu/packages/ssh.scm (libssh2-1.4): Remove variable. Mark H Weaver 2016-02-27gnu: Fix misplaced commas (unquote)....Fix many occurrences of comma (unquote) being placed immediately after the previous list item, e.g. ("ncurses", ncurses) in the inputs. * gnu/packages/base.scm (patch, gnu-make), gnu/packages/bioinformatics.scm (hmmer), gnu/packages/bittorrent.scm (aria2), gnu/packages/compression.scm (pbzip2), gnu/packages/databases.scm (recutils), gnu/packages/fonts.scm (font-terminus), gnu/packages/freedesktop.scm (xdg-utils, elogind), gnu/packages/games.scm (gnujump), gnu/packages/gnome.scm (libidl, gnumeric, eog, gedit), gnu/packages/gnunet.scm (gnunet), gnu/packages/gnuzilla.scm (mozjs, nspr), gnu/packages/gtk.scm (gtksourceview, gdk-pixbuf), gnu/packages/lua.scm (lua), gnu/packages/openstack.scm (python-swiftclient), gnu/packages/perl.scm (perl-json-any), gnu/packages/polkit.scm (polkit-qt), gnu/packages/python.scm (wrap-python3, python-oauthlib) (python-mccabe-0.2.1, python-contextlib2, python2-rauth), gnu/packages/qt.scm (qtkeychain), gnu/packages/ruby.scm (ruby-nokogiri), gnu/packages/screen.scm (screen), gnu/packages/ssh.scm (libssh), gnu/packages/video.scm (ffmpeg, mplayer), gnu/packages/vim.scm (vim), gnu/packages/xdisorg.scm (redshift), gnu/packages/xfce.scm (xfce4-panel, xfce4-settings), gnu/packages/xnee.scm (xnee), gnu/packages/xorg.scm (font-adobe100dpi, font-adobe75dpi), gnu/packages/zsh.scm (zsh): Fix misplaced commas (unquote). Mark H Weaver 2016-02-24gnu: libssh: Update to 0.7.3 [fixes CVE-2016-0739]....* gnu/packages/patches/libssh-CVE-2014-0017.patch: Delete file. * gnu/packages/patches/libssh-0.6.5-CVE-2016-0739.patch: New file. * gnu-system.am (dist_patch_DATA): Adjust accordingly. * gnu/packages/ssh.scm (libssh): Update to 0.7.3. (libssh-0.5): Rename to... (libssh-0.6): ... this. Update to 0.6.5. [source]: Add patch for CVE-2016-0739. (guile-ssh)[inputs]: Use libssh-0.6. Modified-By: Mark H Weaver <mhw@netris.org> Leo Famulari 2016-02-24gnu: libssh2: Update to 1.7.0 [fixes CVE-2016-0787]....* gnu/packages/ssh.scm (libssh2): Update to 1.7.0. (libssh2-1.4): New variable. * gnu/packages/curl.scm (curl)[inputs]: Use libssh4-1.4. Modified-By: Mark H Weaver <mhw@netris.org> Leo Famulari 2016-02-24gnu: dropbear: Update to 2015.71....* gnu/packages/ssh.scm (dropbear): Update to 2015.71. Efraim Flashner 2016-01-15gnu: openssh: Update to 7.1p2....* gnu/packages/ssh.scm (openssh): Update to 7.1p2. Mark H Weaver 2016-01-15Revert "gnu: openssh: Update to 7.1p2 [fixes CVE-0216-0778]."...This reverts commit 6d139e53b596ca154800d154b37fcd22741c629c. Mark H Weaver 2016-01-14gnu: openssh: Update to 7.1p2 [fixes CVE-0216-0778]....* gnu/packages/ssh.scm (openssh): Update to 7.1p2. Mark H Weaver 2016-01-01gnu: guile-ssh: Update to 0.9.0....* gnu/packages/ssh.scm (guile-ssh): Update to 0.9.0. Ludovic Courtès 2015-12-03gnu: openssh: Update to 7.1p1....* gnu/packages/ssh.scm (openssh): Update to 7.1p1. Efraim Flashner 2015-11-30gnu: openssh: Install ssh-copy-id....* gnu/packages/ssh.scm (openssh)[arguments]: Install "ssh-copy-id" and documentation. Fixes <http://bugs.gnu.org/22024>. Reported by Florian Paul Schmidt <mista.tapas@gmx.net>. Ricardo Wurmus 2015-11-30gnu: openssh: Use modify-phases syntax....* gnu/packages/ssh.scm (openssh)[arguments]: Use modify-phases syntax. Ricardo Wurmus 2015-11-23gnu: Fix a few 'source-file-name' lint warnings....* gnu/packages/firmware.scm (ath9k-htc-firmware)[source](file-name): New field. * gnu/packages/gnunet.scm (guile-gnunet)[source](file-name): New field. * gnu/packages/guile.scm (guile-next)[source](file-name): New field. (guile-minikanren)[source](file-name): New field (guile-gdbm-ffi)[source](file-name): New field. * gnu/packages/ssh.scm (guile-ssh)[source](file-name): New field. Ludovic Courtès 2015-11-13gnu: Adjust formatting as recommended by 'guix lint'....* gnu/packages/aidc.scm (barcode, qrencode), gnu/packages/bash.scm (bash, bash-completion), gnu/packages/busybox.scm (busybox), gnu/packages/cdrom.scm (cdparanoia), gnu/packages/cmake.scm (cmake), gnu/packages/conkeror.scm (conkeror), gnu/packages/cook.scm (cook), gnu/packages/curl.scm (curl), gnu/packages/docbook.scm (docbook-xsl), gnu/packages/enlightenment.scm (enlightenment), gnu/packages/games.scm (abbaye), gnu/packages/geeqie.scm (exiv2), gnu/packages/gimp.scm (gegl), gnu/packages/gl.scm (glu, freeglut, ftgl), gnu/packages/glib.scm (glib), gnu/packages/gnome.scm (orbit2, gconf, geocode-glib), gnu/packages/gstreamer.scm (gstreamer, gst-plugins-base), gnu/packages/linux.scm (util-linux), gnu/packages/lisp.scm (gcl, ecl), gnu/packages/maths.scm (gnuplot, hdf5), gnu/packages/ssh.scm (dropbear), gnu/packages/web.scm (json-c): Remove tabulations and trailing white spaces or reformat to fit within 80 columns. * gnu/packages/audio.scm (aubio), gnu/packages/emacs.scm (emacs-s), gnu/packages/engineering.scm (geda-gaf), gnu/packages/games.scm (dosbox), gnu/packages/gnome.scm (gusb), gnu/packages/gtk.scm (gtk+), gnu/packages/guile.scm (guile-wisp), gnu/packages/hurd.scm (hurd-headers), gnu/packages/wm.scm (i3-wm): Adjust synopsis or description. 宋文武