[augeas-devel] [Augeas] #308: Lense and Tests for /etc/audit/auditd.conf

Augeas trac at fedorahosted.org
Wed Nov 14 21:20:20 UTC 2012


#308: Lense and Tests for /etc/audit/auditd.conf
--------------------------+--------------------
  Reporter:  trad511      |      Owner:  lutter
      Type:  enhancement  |     Status:  new
  Priority:  minor        |  Milestone:  next
 Component:  Augeas       |    Version:  devel
Resolution:               |   Keywords:  lense
Blocked By:               |   Blocking:
--------------------------+--------------------

Comment (by raphink):

 Thank you for this lens. I feel however like this is a bit overkill, given
 that `Simplevars.lns` parses the format perfectly well. I'd be more in
 favor of just adding `auditd.conf` to the list of standard conffiles in
 `simplevars.aug`, to be available in the next release of Augeas.

 The tree generated by the test would be simplified (and more standard as
 per Augeas' usual trees):

 {{{
   {  }
   { "#comment" = "This file controls the configuration of the audit
 daemon" }
   {  }
   {  }
   { "log_file" = "/var/log/audit/audit.log" }
   { "log_format" = "RAW" }
   { "log_group" = "root" }
   { "priority_boost" = "4" }
   { "flush" = "INCREMENTAL" }
   { "freq" = "20" }
   { "num_logs" = "5" }
   { "disp_qos" = "lossy" }
   { "dispatcher" = "/sbin/audispd" }
   { "name_format" = "NONE" }
   { "#comment" = "#name = mydomain" }
   { "max_log_file" = "25" }
   { "max_log_file_action" = "ROTATE" }
   { "space_left" = "75" }
   { "space_left_action" = "SYSLOG" }
   { "action_mail_acct" = "root" }
   { "admin_space_left" = "50" }
   { "admin_space_left_action" = "SUSPEND" }
   { "disk_full_action" = "SUSPEND" }
   { "disk_error_action" = "SUSPEND" }
   { "#comment" = "#tcp_listen_port =" }
   { "tcp_listen_queue" = "5" }
   { "tcp_max_per_addr" = "1" }
   { "tcp_client_ports" = "1024-65535" }
   { "tcp_client_max_idle" = "0" }
   { "enable_krb5" = "no" }
   { "krb5_principal" = "auditd" }

 }}}

-- 
Ticket URL: <https://fedorahosted.org/augeas/ticket/308#comment:1>
Augeas <http://augeas.net/>
a configuration API




More information about the augeas-devel mailing list