[redhat-lspp] [PATCH] cups auditing patch

[Matt Anderson]

Here is my updated auditing patch for CUPS.

The patch uses the audit_log_user_message() interface to audit and has
been tested against audit-1.1.3-1 with the 2.6.15-LSPP.7 kernel.  I've
also included an updated spec file based on cups-1.1.23-30.

As I said in the LSPP call there is at least one more audit message that
will be needed.  It will most likely be in
scheduler/auth.c:IsAuthorized() and it will be responsible for sending
the audit event when the user submits a print job which will fail due to
the system security policy.

-matt
-------------- next part --------------
A non-text attachment was scrubbed...
Name: cups-1.1.23-audit.patch
Type: text/x-patch
Size: 10626 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/redhat-lspp/attachments/20060206/867e2031/attachment.bin>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: cups.spec
URL: <http://listman.redhat.com/archives/redhat-lspp/attachments/20060206/867e2031/attachment.ksh>