[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

[patches] Implement mode=forward in audisp-remote



Hello,
the attached patch series implements the store-and-forward mode in audisp-remote.

In mode=forward, as audisp-remote receives audit records, it automatically writes them to a local file.  Therefore neither an unexpected termination of audisp-remote nor problems with the remote server can cause loss of the audit records, and audisp-remote will try to resend all of the pending records before sending any later received audit record, or after restarting audisp-remote.  (Note that loss of audit records is still possible in other cases, e.g. when the system crashes before the records are received by audisp-remote, or when the local queue file is corrupted.)

Detailed description of the approach is included in the individual patches.
    Mirek

Attachment: 11-drop-event_t
Description: Binary data

Attachment: 12-fold-old-queue-interface
Description: Binary data

Attachment: 13-flush-queue-on-startup
Description: Binary data

Attachment: 01-dont-discard-data
Description: Binary data

Attachment: 02-fix-leak-on-input-error
Description: Binary data

Attachment: 03-fix-config-mode-type
Description: Binary data

Attachment: 04-use-make-dependencies
Description: Binary data

Attachment: 05-decouple-do_overflow_action
Description: Binary data

Attachment: 06-drop-increase_queue_depth
Description: Binary data

Attachment: 07-implement-persistent-queue
Description: Binary data

Attachment: 08-config-persistence
Description: Binary data

Attachment: 09-use-persistent-queue
Description: Binary data

Attachment: 10-split-dequeue
Description: Binary data


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]