FreeBSD Bugzilla – Attachment 140628 Details for
Bug 187278
New Russian translation of audit chapter in handbook
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
file.txt
file.txt (text/plain), 36.05 KB, created by
blueboar_2
on 2014-03-05 13:10:00 UTC
(
hide
)
Description:
file.txt
Filename:
MIME Type:
Creator:
blueboar_2
Created:
2014-03-05 13:10:00 UTC
Size:
36.05 KB
patch
obsolete
>8c8 >< Original revision: r30208 >--- >> Original revision: r43688 >16c16,18 >< <chapter xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0" xml:id="audit"> >--- >> <chapter xmlns="http://docbook.org/ns/docbook" >> xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0" >> xml:id="audit"> >19c21,33 >< <author><personname><firstname>Tom</firstname><surname>Rhodes</surname></personname><contrib>á×ÔÏÒ </contrib></author> >--- >> <author> >> <personname> >> <firstname>Tom</firstname> >> <surname>Rhodes</surname> >> </personname> >> <contrib>á×ÔÏÒ </contrib> >> </author> >> <author> >> <personname> >> <firstname>Robert</firstname> >> <surname>Watson</surname> >> </personname> >> </author> >22c36,49 >< <author><personname><firstname>äÅÎÉÓ</firstname><surname>âÁÒÏ×</surname></personname><contrib>ðÅÒÅ×ÏÄ ÎÁ ÒÕÓÓËÉÊ ÑÚÙË: </contrib></author> >--- >> <author> >> <personname> >> <firstname>äÅÎÉÓ</firstname> >> <surname>âÁÒÏ×</surname> >> </personname> >> <contrib>ðÅÒÅ×ÏÄ ÎÁ ÒÕÓÓËÉÊ ÑÚÙË: </contrib> >> </author> >> <author> >> <personname> >> <firstname>÷ÌÁÄÉÍÉÒ</firstname> >> <surname>òÏÍÁÎÏ×</surname> >> </personname> >> <contrib>ïÂÎÏ×ÌÅÎÉÅ ÐÅÒÅ×ÏÄÁ: </contrib> >> </author> >25c52 >< >--- >> >33,36c60,62 >< <para>&os; 6.2-RELEASE É ÂÏÌÅÅ ÐÏÚÄÎÉÅ ×ÅÒÓÉÉ &os; >< ×ËÌÀÞÁÀÔ × ÓÅÂÑ ÐÏÄÄÅÒÖËÕ ÁÕÄÉÔÁ ÓÏÂÙÔÉÊ ÂÅÚÏÐÁÓÎÏÓÔÉ. >< áÕÄÉÔ ÓÏÂÙÔÉÊ ÄÁÅÔ ÎÁÄÅÖÎÙÊ É ÔÏÞÎÙÊ ÓÐÏÓÏ ÄÌÑ >< ÐÒÏÔÏËÏÌÉÒÏ×ÁÎÉÑ ÒÁÚÌÉÞÎÙÈ ÓÏÂÙÔÉÊ, Ó×ÑÚÁÎÎÙÈ Ó ÂÅÚÏÐÁÓÎÏÓÔØÀ, >--- >> <para>ïÐÅÒÁÃÉÏÎÎÁÑ ÓÉÓÔÅÍÁ &os; ×ËÌÀÞÁÅÔ × ÓÅÂÑ ÐÏÄÄÅÒÖËÕ ÁÕÄÉÔÁ >> ÓÏÂÙÔÉÊ ÂÅÚÏÐÁÓÎÏÓÔÉ. áÕÄÉÔ ÓÏÂÙÔÉÊ ÄÁÅÔ ÎÁÄÅÖÎÙÊ É ÔÏÞÎÙÊ ÓÐÏÓÏ >> ÄÌÑ ÐÒÏÔÏËÏÌÉÒÏ×ÁÎÉÑ ÒÁÚÌÉÞÎÙÈ ÓÏÂÙÔÉÊ, Ó×ÑÚÁÎÎÙÈ Ó ÂÅÚÏÐÁÓÎÏÓÔØÀ, >87,107c113,128 >< <para>òÅÁÌÉÚÁÃÉÑ ÁÕÄÉÔÁ × &os; 6.2 - ÜËÓÐÅÒÉÍÅÎÔÁÌØÎÁÑ, ÉÓÐÏÌØÚÏ×ÁÎÉÅ >< ÅÅ × ÒÅÁÌØÎÙÈ ÚÁÄÁÞÁÈ ÄÏÌÖÎÏ ÐÒÏÉÚ×ÏÄÉÔØÓÑ ÔÏÌØËÏ ÐÏÓÌÅ >< ×ÎÉÍÁÔÅÌØÎÏÇÏ ÏÚÎÁËÏÍÌÅÎÉÑ ÓÏ ×ÓÅÍÉ ÒÉÓËÁÍÉ, Ë ËÏÔÏÒÙÍ ÐÒÉ×ÏÄÉÔ >< ÉÓÐÏÌØÚÏ×ÁÎÉÅ ÜËÓÐÅÒÉÍÅÎÔÁÌØÎÏÇÏ ÐÒÏÇÒÁÍÍÎÏÇÏ ÏÂÅÓÐÅÞÅÎÉÑ. ë >< ÉÚ×ÅÓÔÎÙÍ ÏÇÒÁÎÉÞÅÎÉÑÍ ÏÔÎÏÓÉÔÓÑ É ÔÏÔ ÆÁËÔ, ÞÔÏ ÎÅ ×ÓÅ ÓÏÂÙÔÉÑ >< × ÎÁÓÔÏÑÝÉÊ ÍÏÍÅÎÔ ÐÒÏÔÏËÏÌÉÒÕÅÍÙ. îÁÐÒÉÍÅÒ, ÎÅËÏÔÏÒÙÅ ÍÅÈÁÎÉÚÍÙ >< ×ÈÏÄÁ × ÓÉÓÔÅÍÕ (X11-ÏÓÎÏ×ÁÎÎÙÅ ÏËÏÎÎÙÅ ÍÅÎÅÄÖÅÒÙ, ÍÎÏÇÏÅ >< ÐÒÏÇÒÁÍÍÎÏÅ ÏÂÅÓÐÅÞÅÎÉÅ ÏÔ ÓÔÏÒÏÎÎÉÈ ÐÒÏÉÚ×ÏÄÉÔÅÌÅÊ) ÎÅ >< ÓËÏÎÆÉÇÕÒÉÒÏ×ÁÎÙ ÄÌÑ ÐÒÏÔÏËÏÌÉÒÏ×ÁÎÉÑ ÓÏÂÙÔÉÊ ×ÈÏÄÁ × ÓÉÓÔÅÍÕ ÞÅÒÅÚ >< ÐÏÄÓÉÓÔÅÍÕ ÁÕÄÉÔÁ.</para> >< </warning> >< >< <warning> >< <para>éÓÐÏÌØÚÏ×ÁÎÉÅ ÓÉÓÔÅÍÙ × ÁÕÄÉÔÁ ÍÏÖÅÔ ÐÒÉ×ÅÓÔÉ Ë ÇÅÎÅÒÉÒÏ×ÁÎÉÀ >< ÏÇÒÏÍÎÙÈ ÖÕÒÎÁÌØÎÙÈ ÆÁÊÌÏ×: ÉÈ ÒÁÚÍÅÒ ÎÁ ÓÉÌØÎÏ ÚÁÇÒÕÖÅÎÎÙÈ ÓÅÒ×ÅÒÁÈ >< × ÎÅËÏÔÏÒÙÈ ËÏÎÆÉÇÕÒÁÃÉÑÈ ÍÏÖÅÔ ÄÏÓÔÉÇÁÔØ ÎÅÓËÏÌØËÉÈ ÇÉÇÁÂÁÊÔ × ÎÅÄÅÌÀ. >< áÄÍÉÎÉÓÔÒÁÔÏÒÙ ÄÏÌÖÎÙ ×ÎÉÍÁÔÅÌØÎÏ ÓÌÅÄÉÔØ ÚÁ ÄÉÓËÏ×ÙÍ ÐÒÏÓÔÒÁÎÓÔ×ÏÍ >< × ÒÁÚÄÅÌÅ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ. îÁÐÒÉÍÅÒ, ÒÅËÏÍÅÎÄÕÅÔÓÑ ×ÙÄÅÌÉÔØ >< ÏÔÄÅÌØÎÙÊ ÒÁÚÄÅÌ ÄÌÑ ÆÁÊÌÏ×ÏÊ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ >< <filename>/var/audit</filename>, ÞÔÏÂÙ ÐÅÒÅÐÏÌÎÅÎÉÅ ÒÁÚÄÅÌÁ ÁÕÄÉÔÁ >< ÎÅ ×ÌÉÑÌÏ ÎÁ ÒÁÂÏÔÏÓÐÏÓÏÂÎÏÓÔØ ×ÓÅÊ ÏÓÔÁÌØÎÏÊ ÓÉÓÔÅÍÙ.</para> >--- >> <para>òÅÁÌÉÚÁÃÉÑ ÁÕÄÉÔÁ ÉÍÅÅÔ ÉÚ×ÅÓÔÎÙÅ ÏÇÒÁÎÉÞÅÎÉÑ, ÎÁÐÒÉÍÅÒ, >> ÎÅ ×ÓÅ ÓÏÂÙÔÉÑ × ÎÁÓÔÏÑÝÉÊ ÍÏÍÅÎÔ ÐÒÏÔÏËÏÌÉÒÕÅÍÙ. >> îÁÐÒÉÍÅÒ, ÎÅËÏÔÏÒÙÅ ÍÅÈÁÎÉÚÍÙ ×ÈÏÄÁ × ÓÉÓÔÅÍÕ (ïÓÎÏ×ÁÎÎÙÅ ÎÁ X11 >> ÏËÏÎÎÙÅ ÍÅÎÅÄÖÅÒÙ, ÍÎÏÇÏÅ ÐÒÏÇÒÁÍÍÎÏÅ ÏÂÅÓÐÅÞÅÎÉÅ ÏÔ ÓÔÏÒÏÎÎÉÈ >> ÐÒÏÉÚ×ÏÄÉÔÅÌÅÊ) ÎÅ ÓËÏÎÆÉÇÕÒÉÒÏ×ÁÎÙ ÄÌÑ ÐÒÏÔÏËÏÌÉÒÏ×ÁÎÉÑ ÓÏÂÙÔÉÊ >> ×ÈÏÄÁ × ÓÉÓÔÅÍÕ ÞÅÒÅÚ ÐÏÄÓÉÓÔÅÍÕ ÁÕÄÉÔÁ.</para> >> <para>éÓÐÏÌØÚÏ×ÁÎÉÅ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ ÍÏÖÅÔ ÐÒÉ×ÅÓÔÉ Ë ÇÅÎÅÒÉÒÏ×ÁÎÉÀ >> ÏÇÒÏÍÎÙÈ ÖÕÒÎÁÌØÎÙÈ ÆÁÊÌÏ×: ÉÈ ÒÁÚÍÅÒ ÎÁ ÓÉÌØÎÏ ÚÁÇÒÕÖÅÎÎÙÈ ÓÅÒ×ÅÒÁÈ >> × ÎÅËÏÔÏÒÙÈ ËÏÎÆÉÇÕÒÁÃÉÑÈ ÍÏÖÅÔ ÄÏÓÔÉÇÁÔØ ÎÅÓËÏÌØËÉÈ ÇÉÇÁÂÁÊÔ × ÎÅÄÅÌÀ. >> áÄÍÉÎÉÓÔÒÁÔÏÒÙ ÄÏÌÖÎÙ ÐÒÉÎÉÍÁÔØ ×Ï ×ÎÉÍÁÎÉÅ ÔÒÅÂÏ×ÁÎÉÑ >> Ë ÄÉÓËÏ×ÏÍÕ ÐÒÏÓÔÒÁÎÓÔ×Õ ÄÌÑ ÎÁÇÒÕÖÅÎÎÙÈ ËÏÎÆÉÇÕÒÁÃÉÊ ÓÉÓÔÅÍÙ >> ÁÕÄÉÔÁ. îÁÐÒÉÍÅÒ, ÒÅËÏÍÅÎÄÕÅÔÓÑ ×ÙÄÅÌÉÔØ ÏÔÄÅÌØÎÙÊ ÒÁÚÄÅÌ ÄÌÑ >> ÆÁÊÌÏ×ÏÊ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ >> <filename>/var/audit</filename>, >> ÞÔÏÂÙ ÐÅÒÅÐÏÌÎÅÎÉÅ ÒÁÚÄÅÌÁ ÁÕÄÉÔÁ ÎÅ ×ÌÉÑÌÏ ÎÁ ÒÁÂÏÔÏÓÐÏÓÏÂÎÏÓÔØ >> ×ÓÅÊ ÏÓÔÁÌØÎÏÊ ÓÉÓÔÅÍÙ.</para> >113c134 >< <title>ëÌÀÞÅ×ÙÅ ÐÏÎÑÔÉÑ - ËÒÁÔËÉÊ ÓÌÏ×ÁÒØ.</title> >--- >> <title>ëÌÀÞÅ×ÙÅ ÐÏÎÑÔÉÑ × äÁÎÎÏÊ çÌÁ×Å.</title> >116,118c137 >< ËÌÀÞÅ×ÙÈ ÐÏÎÑÔÉÊ. üÔÏ ÎÕÖÎÏ ÄÌÑ ÔÏÇÏ, ÞÔÏÂÙ ÐÒÅÄÏÔ×ÒÁÔÉÔØ >< ÎÅÄÏÒÁÚÕÍÅÎÉÑ, ËÏÔÏÒÙÅ ÍÏÇÕÔ ×ÏÚÎÉËÎÕÔØ ÉÚ-ÚÁ ÒÁÚÎÉÃÙ × ÔÒÁËÔÏ×ËÅ >< ÎÅËÏÔÏÒÙÈ ÔÅÒÍÉÎÏ×. ÷ ÒÕÓÓËÏÊ ×ÅÒÓÉÉ ÄÏËÕÍÅÎÔÁ ÐÒÉ×ÏÄÑÔÓÑ >--- >> ËÌÀÞÅ×ÙÈ ÐÏÎÑÔÉÊ. ÷ ÒÕÓÓËÏÊ ×ÅÒÓÉÉ ÄÏËÕÍÅÎÔÁ ÐÒÉ×ÏÄÑÔÓÑ >125,128c144,145 >< ÍÏÖÅÔ ÂÙÔØ ÚÁÎÅÓÅÎÏ × ÖÕÒÎÁÌ. áÄÍÉÎÉÓÔÒÁÔÏÒ ÍÏÖÅÔ ×ÙÂÉÒÁÔØ, >< ËÁËÉÅ ÉÍÅÎÎÏ ÓÏÂÙÔÉÑ ÂÕÄÕÔ ÖÕÒÎÁÌÉÒÏ×ÁÔØÓÑ ÐÏÄÓÉÓÔÅÍÏÊ >< ÁÕÄÉÔÁ. óÐÉÓÏË ×ÁÖÎÙÈ ÄÌÑ ÂÅÚÏÐÁÓÎÏÓÔÉ ÓÉÓÔÅÍÙ >< ÓÏÂÙÔÉÊ ×ËÌÀÞÁÅÔ: ÓÏÚÄÁÎÉÅ ÆÁÊÌÁ, ÉÎÉÃÉÁÌÉÚÁÃÉÀ ÓÅÔÅ×ÏÇÏ >--- >> ÍÏÖÅÔ ÂÙÔØ ÚÁÎÅÓÅÎÏ × ÖÕÒÎÁÌ. ðÒÉÍÅÒÙ ×ÁÖÎÙÈ ÄÌÑ ÂÅÚÏÐÁÓÎÏÓÔÉ >> ÓÉÓÔÅÍÙ ÓÏÂÙÔÉÊ ×ËÌÀÞÁÅÔ: ÓÏÚÄÁÎÉÅ ÆÁÊÌÁ, ÉÎÉÃÉÁÌÉÚÁÃÉÀ ÓÅÔÅ×ÏÇÏ >132c149,150 >< É <quote>ÎÅ-ÐÒÉÐÉÓÙ×ÁÅÍÙÅ</quote> (non-attributable). ðÒÉÍÅÒ >--- >> É <quote>ÎÅ-ÐÒÉÐÉÓÙ×ÁÅÍÙÅ</quote> (non-attributable), ÅÓÌÉ >> ÉÈ ÎÅÌØÚÑ ÏÔÎÅÓÔÉ Ë ËÏÎËÒÅÔÎÏÍÕ ÐÏÌØÚÏ×ÁÔÅÌÀ. ðÒÉÍÅÒ >134,135c152,153 >< Á×ÔÏÒÉÚÁÃÉÉ ÐÏÌØÚÏ×ÁÔÅÌÑ, ÔÁËÏÅ, ËÁË ÎÅÕÄÁÞÎÙÊ ×ÈÏÄ ÐÏÌØÚÏ×ÁÔÅÌÑ >< × ÓÉÓÔÅÍÕ.</para> >--- >> ÁÕÔÅÎÔÉÆÉËÁÃÉÉ ÐÏÌØÚÏ×ÁÔÅÌÑ, ÔÁËÏÅ, ÎÁÐÒÉÍÅÒ, ÔÁËÏÅ, ËÁË >> ÎÅÕÄÁÞÎÙÊ ×ÈÏÄ ÐÏÌØÚÏ×ÁÔÅÌÑ × ÓÉÓÔÅÍÕ.</para> >139,147c157,162 >< <para><emphasis>ëÌÁÓÓ</emphasis> (class): óÏÂÙÔÉÑ ÍÏÇÕÔ ÂÙÔØ >< ÏÔÎÅÓÅÎÙ Ë ÏÄÎÏÍÕ ÉÌÉ ÂÏÌÅÅ ËÌÁÓÓÁÍ, ÏÂÙÞÎÏ ÏÓÎÏ×Ù×ÁÑÓØ >< ÎÁ ËÁÔÅÇÏÒÉÉ ÓÏÂÙÔÉÑ: <quote>ÓÏÚÄÁÎÉÅ ÆÁÊÌÁ</quote> (fc), >< <quote>ÄÏÓÔÕÐ Ë ÆÁÊÌÕ</quote> (fo), >< <quote>×ÙÐÏÌÎÅÎÉÅ ÆÁÊÌÁ</quote> (ex), ÓÏÂÙÔÉÑ >< ×ÈÏÄÁ × ÓÉÓÔÅÍÕ É ×ÙÈÏÄÁ ÉÚ ÎÅÅ (lo). >< éÓÐÏÌØÚÏ×ÁÎÉÅ ËÌÁÓÓÏ× ÐÏÚ×ÏÌÑÅÔ ÁÄÍÉÎÉÓÔÒÁÔÏÒÕ ÓÏÚÄÁ×ÁÔØ >< ×ÙÓÏËÏÕÒÏ×ÎÅ×ÙÅ ÐÒÁ×ÉÌÁ ÁÕÄÉÔÁ ÂÅÚ ÕËÁÚÁÎÉÑ ËÏÎËÒÅÔÎÙÈ >< ÏÐÅÒÁÃÉÊ, ÏÔÞÅÔ Ï ËÏÔÏÒÙÈ ÄÏÌÖÅÎ ÄÏÂÁ×ÌÑÔØÓÑ × ÖÕÒÎÁÌ.</para> >--- >> <para><emphasis>ëÌÁÓÓ</emphasis> (class): ëÌÁÓÓÙ ÓÏÂÙÔÉÊ ÜÔÏ >> ÉÍÅÎÏ×ÁÎÎÙÅ ÎÁÂÏÒÙ ÏÄÎÏÔÉÐÎÙÈ ÓÏÂÙÔÉÊ, ËÏÔÏÒÙÅ ÉÓÐÏÌØÚÕÀÔÓÑ >> × ×ÙÒÁÖÅÎÉÑÈ ×ÙÂÏÒÁ. þÁÓÔÏÉÓÐÏÌØÚÕÅÍÙÅ ËÌÁÓÓÙ ÓÏÂÙÔÉÊ >> ×ËÌÀÞÁÀÔ <quote>ÓÏÚÄÁÎÉÅ ÆÁÊÌÁ</quote> (fc), >> <quote>×ÙÐÏÌÎÅÎÉÅ ÆÁÊÌÁ</quote> (ex) >> É <quote>ÓÏÂÙÔÉÑ ×ÈÏÄÁ × ÓÉÓÔÅÍÕ É ×ÙÈÏÄÁ ÉÚ ÎÅÅ</quote> (lo).</para> >154,157c169,173 >< ÉÎÆÏÒÍÁÃÉÀ Ï ÓÕÂßÅËÔÅ ÓÏÂÙÔÉÑ (ÐÏÌØÚÏ×ÁÔÅÌÅ), ×ÒÅÍÑ ÓÏÂÙÔÉÑ, >< ÉÎÆÏÒÍÁÃÉÀ Ï ÏÂßÅËÔÁÈ ÓÏÂÙÔÉÑ (ÎÁÐÒÉÍÅÒ, ÆÁÊÌÁÈ) É >< ÉÎÆÏÒÍÁÃÉÀ Ï ÕÓÐÅÛÎÏÓÔÉ ×ÙÐÏÌÎÅÎÉÑ ÏÐÅÒÁÃÉÉ, ÐÏÒÏÄÉ×ÛÅÊ >< ÓÏÂÙÔÉÅ.</para> >--- >> ÉÎÆÏÒÍÁÃÉÀ Ï ÓÕÂßÅËÔÅ ÓÏÂÙÔÉÑ (ÐÏÌØÚÏ×ÁÔÅÌÅ), ËÏÔÏÒÙÊ >> ×ÙÐÏÌÎÉÌ ÎÅËÏÔÏÒÏÅ ÄÅÊÓÔ×ÉÑ, ÄÁÔÕ É ×ÒÅÍÑ ÓÏÂÙÔÉÑ, >> ÉÎÆÏÒÍÁÃÉÀ Ï ÏÂßÅËÔÁÈ É ÁÒÇÕÍÅÎÔÁÈ ÓÏÂÙÔÉÑ, ÅÓÌÉ ÏÎÉ ÅÓÔØ, >> Á ÔÁËÖÅ ÉÎÆÏÒÍÁÃÉÀ Ï ÕÓÐÅÛÎÏÓÔÉ ×ÙÐÏÌÎÅÎÉÑ ÏÐÅÒÁÃÉÉ, >> ÐÏÒÏÄÉ×ÛÅÊ ÓÏÂÙÔÉÅ.</para> >162,163c178,179 >< <quote>ÖÕÒÎÁÌ</quote> ÁÕÄÉÔÁ, ÉÌÉ ÌÏÇ-ÆÁÊÌ - >< ÓÏÄÅÒÖÉÔ ÓÅÒÉÀ <quote>ÚÁÐÉÓÅÊ</quote> Ï ÓÉÓÔÅÍÎÙÈ ÓÏÂÙÔÉÑÈ. >--- >> ÖÕÒÎÁÌ ÁÕÄÉÔÁ, ÉÌÉ ÌÏÇ-ÆÁÊÌ - >> ÓÏÄÅÒÖÉÔ ÓÅÒÉÀ ÚÁÐÉÓÅÊ Ï ÓÉÓÔÅÍÎÙÈ ÓÏÂÙÔÉÑÈ. >166,167c182,183 >< ÓÏÂÙÔÉÑ. ôÏÌØËÏ Á×ÔÏÒÉÚÏ×ÁÎÎÙÅ ÐÒÏÃÅÓÓÙ (ÎÁÐÒÉÍÅÒ, >< <command>auditd</command>) ÉÍÅÀÔ ÄÏÓÔÕÐ Ë ÖÕÒÎÁÌÕ.</para> >--- >> ÓÏÂÙÔÉÑ. ôÏÌØËÏ Á×ÔÏÒÉÚÏ×ÁÎÎÙÅ ÐÒÏÃÅÓÓÙ ÍÏÇÕÔ >> ÄÏÂÁ×ÌÑÔØ ÚÁÐÉÓÉ × ÖÕÒÎÁÌ.</para> >171c187 >< <para><emphasis>×ÙÒÁÖÅÎÉÅ ×ÙÄÅÌÅÎÉÑ</emphasis> (selection expression): >--- >> <para><emphasis>×ÙÒÁÖÅÎÉÅ ×ÙÂÏÒÁ</emphasis> (selection expression): >173c189 >< ÄÌÑ ×ÙÄÅÌÅÎÉÑ ÇÒÕÐÐÙ ÓÏÂÙÔÉÊ.</para> >--- >> ÄÌÑ ×ÙÂÏÒÁ ÇÒÕÐÐÙ ÓÏÂÙÔÉÊ.</para> >177,179c193,195 >< <para><emphasis>ÐÒÅÄ×ÁÒÉÔÅÌØÎÏÅ ×ÙÄÅÌÅÎÉÅ</emphasis> (preselection): >< ðÒÏÃÅÓÓ, ×Ï ×ÒÅÍÑ ËÏÔÏÒÏÇÏ ÓÉÓÔÅÍÁ ÏÐÒÅÄÅÌÑÅÔ, ËÁËÉÅ ÓÏÂÙÔÉÑ ÉÍÅÀÔ >< ÐÒÉÏÒÉÔÅÔÎÕÀ ×ÁÖÎÏÓÔØ ÄÌÑ ÁÄÍÉÎÉÓÔÒÁÔÏÒÁ. üÔÏ ÎÅÏÂÈÏÄÉÍÏ ÄÌÑ ÔÏÇÏ, >--- >> <para><emphasis>ÐÒÅÄ×ÁÒÉÔÅÌØÎÙÊ ×ÙÂÏÒ</emphasis> (preselection): >> ðÒÏÃÅÓÓ, Ó ÐÏÍÏÝØÀ ËÏÔÏÒÏÇÏ ÓÉÓÔÅÍÁ ÏÐÒÅÄÅÌÑÅÔ, ËÁËÉÅ ÓÏÂÙÔÉÑ ÉÍÅÀÔ >> ×ÁÖÎÏÓÔØ ÄÌÑ ÁÄÍÉÎÉÓÔÒÁÔÏÒÁ. üÔÏ ÎÅÏÂÈÏÄÉÍÏ ÄÌÑ ÔÏÇÏ, >181,185c197,201 >< ðÒÅÄ×ÁÒÉÔÅÌØÎÏÅ ×ÙÄÅÌÅÎÉÅ ÉÓÐÏÌØÚÕÅÔ ÒÑÄ >< <emphasis>×ÙÒÁÖÅÎÉÊ ×ÙÄÅÌÅÎÉÑ</emphasis> ÄÌÑ ÔÏÇÏ, ÞÔÏÂÙ ÏÐÒÅÄÅÌÉÔØ, >< ËÁËÉÅ ÉÍÅÎÎÏ ËÌÁÓÓÙ ÓÏÂÙÔÉÊ ÄÌÑ ËÁËÏÇÏ ÐÏÌØÚÏ×ÁÔÅÌÑ ÎÅÏÂÈÏÄÉÍÏ ×ÎÏÓÉÔØ >< × ÖÕÒÎÁÌ, ÔÁË ÖÅ, ËÁË É ÄÌÑ Á×ÔÏÒÉÚÏ×ÁÎÎÙÈ É ÎÅÁ×ÔÏÒÉÚÏ×ÁÎÎÙÈ >< ÐÒÏÃÅÓÓÏ×.</para> >--- >> ðÒÅÄ×ÁÒÉÔÅÌØÎÙÊ ×ÙÂÏÒ ÉÓÐÏÌØÚÕÅÔ ÒÑÄ ×ÙÒÁÖÅÎÉÊ ×ÙÂÏÒÁ >> ÄÌÑ ÔÏÇÏ, ÞÔÏÂÙ ÏÐÒÅÄÅÌÉÔØ, ËÁËÉÅ ÉÍÅÎÎÏ ËÌÁÓÓÙ ÓÏÂÙÔÉÊ ÄÌÑ >> ËÁËÏÇÏ ÐÏÌØÚÏ×ÁÔÅÌÑ ÎÅÏÂÈÏÄÉÍÏ ×ÎÏÓÉÔØ × ÖÕÒÎÁÌ, Á ÔÁË ÖÅ >> ÇÌÏÂÁÌØÎÙÅ ÎÁÓÔÒÏÊËÉ, ËÏÔÏÒÙÅ ÂÕÄÕÔ ÐÒÉÍÅÎÑÔØÓÑ ËÁË ÄÌÑ >> Á×ÔÏÒÉÚÏ×ÁÎÎÙÈ, ÔÁË É ÄÌÑ ÎÅÁ×ÔÏÒÉÚÏ×ÁÎÎÙÈ ÐÒÏÃÅÓÓÏ×.</para> >191,197c207,213 >< ×ÙÄÅÌÑÀÔÓÑ ÄÌÑ ÈÒÁÎÅÎÉÑ, ÒÁÓÐÅÞÁÔËÉ ÉÌÉ ÁÎÁÌÉÚÁ. ðÒÏÃÅÓÓ ×Ï ÍÎÏÇÏÍ >< ÁÎÁÌÏÇÉÞÅÎ <emphasis>ÐÒÅÄ×ÁÒÉÔÅÌØÎÏÍÕ ×ÙÄÅÌÅÎÉÀ</emphasis>. éÓÐÏÌØÚÕÑ >< <emphasis>ÆÉÌØÔÒÁÃÉÀ</emphasis> ÁÄÍÉÎÉÓÔÒÁÔÏÒÙ ÍÏÇÕÔ ÒÅÁÌÉÚÏ×Ù×ÁÔØ >< ÒÁÚÌÉÞÎÙÅ ÐÏÌÉÔÉËÉ ÈÒÁÎÅÎÉÑ ÖÕÒÎÁÌÏ× ÁÕÄÉÔÁ. îÁÐÒÉÍÅÒ, ÄÅÔÁÌÉÚÉÒÏ×ÁÎÎÙÊ >< ÖÕÒÎÁÌ ÍÏÖÅÔ ÈÒÁÎÉÔØÓÑ ÍÅÓÑÃ, ÎÏ ÐÏÓÌÅ ÜÔÏÇÏ ÏÎ ÄÏÌÖÅÎ ÂÙÔØ ÓÏËÒÁÝÅÎ >< ÞÔÏÂÙ ÈÒÁÎÉÔØ ÔÏÌØËÏ ÉÎÆÏÒÍÁÃÉÀ Ï ×ÈÏÄÅ × ÓÉÓÔÅÍÕ É ×ÙÈÏÄÅ ÉÚ ÎÅÅ >< ÂÏÌÅÅ ÄÌÉÔÅÌØÎÙÊ ÓÒÏË.</para> >--- >> ×ÙÄÅÌÑÀÔÓÑ ÄÌÑ ÈÒÁÎÅÎÉÑ, ÒÁÓÐÅÞÁÔËÉ ÉÌÉ ÁÎÁÌÉÚÁ. ôÁËÖÅ, ÜÔÏ >> ÐÒÏÃÅÓÓ, × ÒÅÚÕÌØÔÁÔÅ ËÏÔÏÒÏÇÏ ÎÅÖÅÌÁÔÅÌØÎÙÅ ÚÁÐÉÓÉ ÕÄÁÌÑÀÔÓÑ >> ÉÚ ÖÕÒÎÁÌÁ ÁÕÄÉÔÁ. éÓÐÏÌØÚÕÑ ÆÉÌØÔÒÁÃÉÀ, ÁÄÍÉÎÉÓÔÒÁÔÏÒÙ ÍÏÇÕÔ >> ÒÅÁÌÉÚÏ×Ù×ÁÔØ ÒÁÚÌÉÞÎÙÅ ÐÏÌÉÔÉËÉ ÈÒÁÎÅÎÉÑ ÄÁÎÎÙÈ ÁÕÄÉÔÁ. >> îÁÐÒÉÍÅÒ, ÄÅÔÁÌÉÚÉÒÏ×ÁÎÎÙÊ ÖÕÒÎÁÌ ÍÏÖÅÔ ÈÒÁÎÉÔØÓÑ ÍÅÓÑÃ, ÎÏ >> ÐÏÓÌÅ ÜÔÏÇÏ ÏÎ ÄÏÌÖÅÎ ÂÙÔØ ÓÏËÒÁÝÅÎ ÞÔÏÂÙ ÈÒÁÎÉÔØ ÔÏÌØËÏ >> ÉÎÆÏÒÍÁÃÉÀ Ï ×ÈÏÄÅ × ÓÉÓÔÅÍÕ É ×ÙÈÏÄÅ ÉÚ ÎÅÅ ÄÌÑ ÃÅÌÅÊ ÁÒÈÉ×ÁÃÉÉ.</para> >206,209c222,225 >< ÂÁÚÏ×ÏÊ ÓÉÓÔÅÍÙ &os; ÎÁÞÉÎÁÑ Ó ×ÅÒÓÉÉ 6.2-RELEASE. ôÅÍ ÎÅ ÍÅÎÅÅ, >< ÐÏÄÄÅÒÖËÁ ÁÕÄÉÔÁ ÄÏÌÖÎÁ ÂÙÔØ ÄÏÂÁ×ÌÅÎÁ × ÑÄÒÏ. üÔÏÇÏ >< ÍÏÖÎÏ ÄÏÂÉÔØÓÑ, ÄÏÂÁ×É× ÓÌÅÄÕÀÝÕÀ ÓÔÒÏËÕ × ËÏÎÆÉÇÕÒÁÃÉÏÎÎÙÊ ÆÁÊÌ >< ×ÁÛÅÇÏ ÓÐÅÃÉÁÌØÎÏÇÏ ÑÄÒÁ:</para> >--- >> ÂÁÚÏ×ÏÊ ÓÉÓÔÅÍÙ &os;. ðÏÄÄÅÒÖËÁ ÁÕÄÉÔÁ ÓÏÂÙÔÉÊ ÓÏ ÓÔÏÒÏÎÙ ÑÄÒÁ >> ÔÁËÖÅ ËÏÍÐÉÌÉÒÕÅÔÓÑ ÐÏ ÕÍÏÌÞÁÎÉÀ, ÎÏ ÐÏÄÄÅÒÖËÁ ÄÁÎÎÏÊ ×ÏÚÍÏÖÎÏÓÔÉ >> ÔÒÅÂÕÅÔ ÓÏÚÄÁÎÉÑ Ó×ÏÅÇÏ ÑÄÒÁ, Ó ÄÏÂÁ×ÌÅÎÉÅÍ ÓÌÅÄÕÀÝÅÊ ÓÔÒÏËÉ >> × ËÏÎÆÉÇÕÒÁÃÉÏÎÎÙÊ ÆÁÊÌ ÑÄÒÁ:</para> >216c232,233 >< <para>ðÏÓÌÅ ÜÔÏÇÏ, ÎÅÏÂÈÏÄÉÍÏ ÒÁÚÒÅÛÉÔØ ÚÁÐÕÓË ÄÅÍÏÎÁ ÁÕÄÉÔÁ, >--- >> <para>ëÁË ÔÏÌØËÏ ÑÄÒÏ Ó ÐÏÄÄÅÒÖËÏÊ ÁÕÄÉÔÁ ÂÙÌÏ ÓÏÂÒÁÎÏ É ÕÓÔÁÎÏ×ÌÅÎÏ, >> Á ÓÉÓÔÅÍÁ ÂÙÌÁ ÐÅÒÅÚÁÇÒÕÖÅÎÁ, ÎÅÏÂÈÏÄÉÍÏ ÒÁÚÒÅÛÉÔØ ÚÁÐÕÓË ÄÅÍÏÎÁ ÁÕÄÉÔÁ, >221,224c238,242 >< <para>äÌÑ ÚÁÐÕÓËÁ ÄÅÍÏÎÁ ÓÏ ÓÐÅÃÉÆÉÞÅÓËÉÍÉ ÐÁÒÁÍÅÔÒÁÍÉ ÎÕÖÎÏ >< ÕËÁÚÁÔØ ÜÔÉ ÐÁÒÁÍÅÔÒÙ × ÏÐÃÉÉ <option>auditd_flags</option> >< ÆÁÊÌÁ &man.rc.conf.5;.</para> >< </sect1> >--- >> <para>úÁÔÅÍ ÎÕÖÎÏ ÚÁÐÕÓÔÉÔØ ÐÏÄÄÅÒÖËÕ ÁÕÄÉÔÁ ÌÉÂÏ ÐÕÔÅÍ >> ÐÅÒÅÚÁÇÒÕÚËÉ, ÌÉÂÏ ×ÒÕÞÎÕÀ, ÚÁÐÕÓÔÉ× ÄÅÍÏÎ ÁÕÄÉÔÁ:</para> >> >> <programlisting>service auditd start</programlisting> >> </sect1> >229d246 >< >244c261 >< ÁÕÄÉÔÁ, É ÄÒÕÇÉÅ.</para> >--- >> ÁÕÄÉÔÁ, ÍÁËÓÉÍÁÌØÎÙÊ ÒÁÚÍÅÒ ÖÕÒÎÁÌÁ ÁÕÄÉÔÁ É ÄÒÕÇÉÅ.</para> >248,249c265,268 >< <para><filename>audit_event</filename> - ïÐÒÅÄÅÌÑÅÔ ÏÓÎÏ×ÎÙÅ >< ÓÏÂÙÔÉÑ ÁÕÄÉÔÁ. üÔÏ, × ÏÓÎÏ×ÎÏÍ, ÓÉÓÔÅÍÎÙÅ ×ÙÚÏ×Ù.</para> >--- >> <para><filename>audit_event</filename> - ôÅËÓÔÏ×ÙÅ ÉÍÅÎÁ É >> ÏÐÉÓÁÎÉÑ ÓÏÂÙÔÉÊ ÁÕÄÉÔÁ, Á ÔÁËÖÅ ÓÐÉÓÏË, ÏÐÒÅÄÅÌÑÀÝÉÊ >> ÓÏÏÔ×ÅÔÓÔ×ÉÅ ËÌÁÓÓÏ× É ÓÏÂÙÔÉÊ, ËÏÔÏÒÙÅ ÎÁÈÏÄÑÔÓÑ × ÄÁÎÎÙÈ >> ËÌÁÓÓÁÈ.</para> >253,256c272,275 >< <para><filename>audit_user</filename> - óÏÂÙÔÉÑ ÁÕÄÉÔÁ ÄÌÑ >< ÄÌÑ ÏÔÄÅÌØÎÙÈ ÐÏÌØÚÏ×ÁÔÅÌÅÊ. ðÏÌØÚÏ×ÁÔÅÌÉ, ÎÅ ÕÐÏÍÉÎÁÅÍÙÅ >< × ÜÔÏÍ ÆÁÊÌÅ, ÂÕÄÕÔ ÒÁÓÓÍÁÔÒÉ×ÁÔØÓÑ ËÁË ÓÕÂßÅËÔÙ ËÏÎÆÉÇÕÒÁÃÉÉ >< ÐÏ-ÕÍÏÌÞÁÎÉÀ × ÆÁÊÌÅ <filename>audit_control</filename>.</para> >--- >> <para><filename>audit_user</filename> - ôÒÅÂÏ×ÁÎÉÑ ÁÕÄÉÔÁ, ËÏÔÏÒÙÅ >> ÏÔÌÉÞÁÀÔÓÑ ÄÌÑ ÏÔÄÅÌØÎÙÈ ÐÏÌØÚÏ×ÁÔÅÌÅÊ. ïÎÉ ÓÏÅÄÉÎÑÀÔÓÑ Ó >> ÇÌÏÂÁÌØÎÙÍÉ ÎÁÓÔÒÏÊËÁÍÉ ÐÏ ÕÍÏÌÞÁÎÉÀ ÐÒÉ ×ÈÏÄÅ ÐÏÌØÚÏ×ÁÔÅÌÑ >> × ÓÉÓÔÅÍÕ.</para> >259d277 >< >262,263c280,281 >< ÉÎÔÅÒÐÒÅÔÁÔÏÒÁ Bourne Shell, ËÏÔÏÒÙÊ ÉÓÐÏÌØÚÕÅÔÓÑ, ÞÔÏÂÙ >< ÓÇÅÎÅÒÉÒÏ×ÁÔØ ÐÒÅÄÕÐÒÅÖÄÁÀÝÉÅ ÓÏÏÂÝÅÎÉÑ Ï ÉÓËÌÀÞÉÔÅÌØÎÙÈ >--- >> ÉÎÔÅÒÐÒÅÔÁÔÏÒÁ, ÉÓÐÏÌØÚÕÅÍÙÊ &man.auditd.8;, >> ÞÔÏÂÙ ÓÇÅÎÅÒÉÒÏ×ÁÔØ ÐÒÅÄÕÐÒÅÖÄÁÀÝÉÅ ÓÏÏÂÝÅÎÉÑ Ï ÉÓËÌÀÞÉÔÅÌØÎÙÈ >265c283,284 >< ÐÒÏÓÔÒÁÎÓÔ×Ï ÄÌÑ ÚÁÐÉÓÅÊ ÖÕÒÎÁÌÏ× ÁÕÄÉÔÁ.</para> >--- >> ÐÒÏÓÔÒÁÎÓÔ×Ï ÄÌÑ ÚÁÐÉÓÅÊ ÖÕÒÎÁÌÏ× ÁÕÄÉÔÁ, ÌÉÂÏ ËÏÇÄÁ ÐÒÏÉÚÏÛÌÁ >> ÒÏÔÁÃÉÑ ÆÁÊÌÁ ÖÕÒÎÁÌÁ ÁÕÄÉÔÁ.</para> >268a288,293 >> <warning> >> <para>æÁÊÌÙ ËÏÎÆÉÇÕÒÁÃÉÉ ÁÕÄÉÔÁ ÄÏÌÖÎÙ ÒÅÄÁËÔÉÒÏ×ÁÔØÓÑ É >> ÉÚÍÅÎÑÔØÓÑ Ó ÏÓÔÏÒÏÖÎÏÓÔØÀ, ÔÁË ËÁË ÏÛÉÂËÉ × ËÏÎÆÉÇÕÒÁÃÉÉ >> ÍÏÇÕÔ ÐÒÉ×ÅÓÔÉ Ë ÎÅÐÒÁ×ÉÌØÎÏÍÕ ÌÏÇÕ ÓÏÂÙÔÉÊ</para> >> </warning> >> >270c295 >< <title>æÏÒÍÁÔ ËÏÎÆÉÇÕÒÁÃÉÏÎÎÏÇÏ ÆÁÊÌÁ</title> >--- >> <title>÷ÙÒÁÖÅÎÉÑ ×ÙÂÏÒÁ ÓÏÂÙÔÉÊ</title> >272,280c297,306 >< <para>æÏÒÍÁÔ ËÏÎÆÉÇÕÒÁÃÉÏÎÎÏÇÏ ÆÁÊÌÁ ÎÅ ÏÞÅÎØ ÌÏÇÉÞÅÎ, ÎÏ Ó ÎÉÍ, ÔÅÍ >< ÎÅ ÍÅÎÅÅ, ÄÏÓÔÁÔÏÞÎÏ ÐÒÏÓÔÏ ÒÁÂÏÔÁÔØ. ïÄÎÁËÏ, ÁÄÍÉÎÉÓÔÒÁÔÏÒÁÍ >< ÓÌÅÄÕÅÔ ÂÙÔØ ÏÞÅÎØ ×ÎÉÍÁÔÅÌØÎÙÍÉ ÐÒÉ ÉÚÍÅÎÅÎÉÉ ÚÎÁÞÅÎÉÊ ÐÏ >< ÕÍÏÌÞÁÎÉÀ, ÐÏÓËÏÌØËÕ ÜÔÏ ÓÏÚÄÁÅÔ ÐÏÔÅÎÃÉÁÌØÎÕÀ ÏÐÁÓÎÏÓÔØ >< ÎÅÐÒÁ×ÉÌØÎÏÇÏ ÓÂÏÒÁ ÄÁÎÎÙÈ ÓÉÓÔÅÍÏÊ ÁÕÄÉÔÁ.</para> >< >< <para>÷ ËÏÎÆÉÇÕÒÁÃÉÏÎÎÏÍ ÆÁÊÌÅ ÍÏÇÕÔ ÉÓÐÏÌØÚÏ×ÁÔØÓÑ ËÁË ÐÏÌÎÙÅ, >< ÔÁË É ÓÏËÒÁÝÅÎÎÙÅ ÐÁÒÁÍÅÔÒÙ. óÏÏÔ×ÅÔÓÔ×ÉÑ ÂÕÄÕÔ ÐÒÉ×ÅÄÅÎÙ >< ÎÉÖÅ.</para> >--- >> <para>÷ÙÒÁÖÅÎÉÑ ×ÙÂÏÒÁ ÉÓÐÏÌØÚÕÀÔÓÑ × ÎÅÓËÏÌØËÉÈ ÍÅÓÔÁÈ >> ËÏÎÆÉÇÕÒÁÃÉÉ ÁÕÄÉÔÁ ÄÌÑ ÏÐÒÅÄÅÌÅÎÉÑ ÔÏÇÏ, ËÁËÉÅ ÓÏÂÙÔÉÑ ÄÏÌÖÎÙ >> ÐÏÄ×ÅÒÇÁÔØÓÑ ÁÕÄÉÔÕ. ÷ÙÒÁÖÅÎÉÑ ÓÏÄÅÒÖÁÔ ÓÐÉÓÏË ËÌÁÓÓÏ× ÓÏÂÙÔÉÊ, >> Ó ËÏÔÏÒÙÍÉ ÉÎÔÅÒÅÓÕÀÝÅÅ ÎÁÓ ÓÏÂÙÔÉÅ ÂÕÄÅÔ ÓÒÁ×ÎÉ×ÁÔØÓÑ. ëÁÖÄÏÅ >> ×ÙÒÁÖÅÎÉÅ ÉÍÅÅÔ ÐÒÅÆÉËÓ, ÐÏËÁÚÙ×ÁÀÝÉÊ, ÎÕÖÎÏ ÌÉ ÐÒÉÎÑÔØ >> ÉÌÉ ÉÇÎÏÒÉÒÏ×ÁÔØ ÎÁÊÄÅÎÎÏÅ ÓÏÂÙÔÉÅ, É, ×ÏÚÍÏÖÎÏ, ÐÏËÁÚÙ×ÁÀÝÉÊ, >> ÉÎÔÅÒÅÓÕÀÔ ÌÉ ÎÁÓ ÕÓÐÅÛÎÙÅ ÉÌÉ ÎÅÕÓÐÅÛÎÙÅ ÏÐÅÒÁÃÉÉ. ÷ÙÒÁÖÅÎÉÑ >> ×ÙÂÏÒÁ ÒÁÓÓÍÁÔÒÉ×ÁÀÔÓÑ ÓÌÅ×Á ÎÁÐÒÁ×Á, É Ä×Á ×ÙÒÁÖÅÎÉÑ >> ÏÂßÅÄÉÎÑÀÔÓÑ ÐÒÏÓÔÙÍ ÄÏÂÁ×ÌÅÎÉÅÍ ×ÔÏÒÏÇÏ ×ÙÒÁÖÅÎÉÑ Ë ËÏÎÃÕ >> ÐÅÒ×ÏÇÏ.</para> >282c308 >< <para>óÌÅÄÕÀÝÉÊ ÓÐÉÓÏË ÓÏÄÅÒÖÉÔ ×ÓÅ ËÌÁÓÓÙ ÐÏ ÕÍÏÌÞÁÎÉÀ, >--- >> <para>óÌÅÄÕÀÝÉÊ ÓÐÉÓÏË ÓÏÄÅÒÖÉÔ ËÌÁÓÓÙ ÐÏ ÕÍÏÌÞÁÎÉÀ, >287c313 >< <para><option>all</option> - <literal>all</literal> - >--- >> <para><literal>all</literal> - <emphasis>all</emphasis> - >292c318 >< <para><option>ad</option> - <literal>administrative</literal> >--- >> <para><literal>ad</literal> - <emphasis>administrative</emphasis> >298c324 >< <para><option>ap</option> - <literal>application</literal> - >--- >> <para><literal>ap</literal> - <emphasis>application</emphasis> - >303,305c329,330 >< <para><option>cl</option> - <literal>file_close</literal> >< - áÕÄÉÔ ×ÙÚÏ×Ï× ÓÉÓÔÅÍÎÏÊ ÆÕÎËÃÉÉ >< <function>close</function>.</para> >--- >> <para><literal>cl</literal> - <emphasis>file close</emphasis> >> - áÕÄÉÔ ×ÙÚÏ×Ï× ÓÉÓÔÅÍÎÏÊ ÆÕÎËÃÉÉ <function>close</function>.</para> >309c334 >< <para><option>ex</option> - <literal>exec</literal> - >--- >> <para><literal>ex</literal> - <emphasis>exec</emphasis> - >317,319c342,344 >< <para><option>fa</option> - <literal>file_attr_acc</literal> >< - áÕÄÉÔ ÄÏÓÔÕÐÁ Ë ÁÔÒÉÂÕÔÁÍ ÏÂßÅËÔÏ× É ÉÈ ÉÚÍÅÎÅÎÉÀ, >< ÎÁÐÒÉÍÅÒ ÞÅÒÅÚ &man.stat.1;, &man.pathconf.2;, Á >--- >> <para><literal>fa</literal> - <emphasis>file attribute access</emphasis> >> - áÕÄÉÔ ÄÏÓÔÕÐÁ Ë ÁÔÒÉÂÕÔÁÍ ÏÂßÅËÔÏ×, >> ÎÁÐÒÉÍÅÒ &man.stat.1;, &man.pathconf.2;, Á >324c349 >< <para><option>fc</option> - <literal>file_creation</literal> >--- >> <para><literal>fc</literal> - <emphasis>file create</emphasis> >330c355 >< <para><option>fd</option> - <literal>file_deletion</literal> >--- >> <para><literal>fd</literal> - <emphasis>file delete</emphasis> >336c361 >< <para><option>fm</option> - <literal>file_attr_mod</literal> >--- >> <para><literal>fm</literal> - <emphasis>file attribute modify</emphasis> >343c368 >< <para><option>fr</option> - <literal>file_read</literal> >--- >> <para><literal>fr</literal> - <emphasis>file read</emphasis> >349c374 >< <para><option>fw</option> - <literal>file_write</literal> - >--- >> <para><literal>fw</literal> - <emphasis>file write</emphasis> - >351c376 >< ÚÁÐÉÓØ ÄÁÎÎÙÈ, ÉÚÍÅÎÅÎÉÅ ÆÁÊÌÏ× É ÔÁË ÄÁÌÅÅ.</para> >--- >> ÚÁÐÉÓØ ÄÁÎÎÙÈ, ÚÁÐÉÓØ ÉÌÉ ÉÚÍÅÎÅÎÉÅ ÆÁÊÌÏ× É ÔÁË ÄÁÌÅÅ.</para> >355c380 >< <para><option>io</option> - <literal>ioctl</literal> - >--- >> <para><literal>io</literal> - <emphasis>ioctl</emphasis> - >360c385 >< <para><option>ip</option> - <literal>ipc</literal> - >--- >> <para><literal>ip</literal> - <emphasis>ipc</emphasis> - >362c387 >< ×ËÌÀÞÁÑ ÓÏÚÄÁÎÉÅ ÎÅ-ÉÍÅÎÏ×ÁÎÎÙÈ ËÁÎÁÌÏ× (pipe) É >--- >> ×ËÌÀÞÁÑ ÓÏÚÄÁÎÉÅ ÎÅ-ÉÍÅÎÏ×ÁÎÎÙÈ ËÁÎÁÌÏ× (POSIX pipe) É >368,369c393,395 >< <para><option>lo</option> - <literal>login_logout</literal> - >< áÕÄÉÔ ÓÏÂÙÔÉÊ &man.login.1; É &man.logout.1;.</para> >--- >> <para><literal>lo</literal> - <emphasis>login_logout</emphasis> - >> áÕÄÉÔ ÓÏÂÙÔÉÊ &man.login.1; É &man.logout.1;, >> ÐÒÏÉÓÈÏÄÑÝÉÈ × ÓÉÓÔÅÍÅ.</para> >373c399 >< <para><option>na</option> - <literal>non_attrib</literal> - >--- >> <para><literal>na</literal> - <emphasis>non attributable</emphasis> - >378,380c404,405 >< <para><option>no</option> - <literal>no_class</literal> - >< ðÕÓÔÏÊ ËÌÁÓÓ, ÉÓÐÏÌØÚÕÅÔÓÑ ÄÌÑ ÏÔËÌÀÞÅÎÉÑ >< ÁÕÄÉÔÁ.</para> >--- >> <para><literal>no</literal> - <emphasis>invalid class</emphasis> - >> îÅ ÓÏÏÔ×ÅÔÓÔ×ÕÅÔ ÎÉËÁËÉÍ ÓÏÂÙÔÉÑÍ ÁÕÄÉÔÁ.</para> >384c409 >< <para><option>nt</option> - <literal>network</literal> - >--- >> <para><literal>nt</literal> - <emphasis>network</emphasis> - >390,391c415,416 >< <para><option>ot</option> - <literal>other</literal> - >< áÕÄÉÔ ÓÏÂÙÔÉÊ, ÎÅ ×ÏÛÅÄÛÉÈ × ÄÒÕÇÉÅ ËÌÁÓÓÙ.</para> >--- >> <para><literal>ot</literal> - <emphasis>other</emphasis> - >> áÕÄÉÔ ÒÁÚÌÉÞÎÙÈ ÓÏÂÙÔÉÊ.</para> >395c420 >< <para><option>pc</option> - <literal>process</literal> - >--- >> <para><literal>pc</literal> - <emphasis>process</emphasis> - >405,406c430,433 >< <para>ëÁÖÄÙÊ ËÌÁÓÓ ËÏÍÂÉÎÉÒÕÅÔÓÑ Ó ÐÒÅÆÉËÓÏÍ, ÐÏËÁÚÙ×ÁÀÝÉÍ ÕÄÁÞÎÏÅ >< ÉÌÉ ÎÅÕÄÁÞÎÏÅ ÚÁ×ÅÒÛÅÎÉÅ ÏÐÅÒÁÃÉÉ.</para> >--- >> <para>ëÁÖÄÙÊ ËÌÁÓÓ ÁÕÄÉÔÁ ËÏÍÂÉÎÉÒÕÅÔÓÑ Ó ÐÒÅÆÉËÓÏÍ, ÐÏËÁÚÙ×ÁÀÝÉÍ, >> ËÁËÉÅ ÏÐÅÒÁÃÉÉ ÂÕÄÕÔ ÕÞÉÔÙ×ÁÔØÓÑ - ÕÄÁÞÎÙÅ ÉÌÉ ÎÅÕÄÁÞÎÙÅ, >> Á ÔÁËÖÅ ÔÏ, ×ËÌÀÞÁÅÔ ÌÉ ÄÁÎÎÁÑ ÚÁÐÉÓØ ÁÕÄÉÔ ÄÌÑ ÄÁÎÎÏÇÏ >> ËÌÁÓÓÁ É ÔÉÐÁ, ÌÉÂÏ ÏÔËÌÀÞÁÅÔ ÅÇÏ.</para> >411,413c438 >< ÕÓÐÅÛÎÏÇÏ, ÔÁË É ÄÌÑ ÏÛÉÂÏÞÎÏÇÏ ÓÏÂÙÔÉÑ. îÁÐÒÉÍÅÒ, ÐÒÏÓÔÏ >< ÕËÁÚÁÎÉÅ ËÌÁÓÓÁ ÂÅÚ ÐÒÅÆÉËÓÁ ÐÒÉ×ÅÄÅÔ Ë ÚÁÎÅÓÅÎÉÀ ÓÏÂÙÔÉÑ >< × ÖÕÒÎÁÌ ÐÒÉ ÌÀÂÏÍ ÒÅÚÕÌØÔÁÔÅ ÏÐÅÒÁÃÉÉ.</para> >--- >> ÕÓÐÅÛÎÏÇÏ, ÔÁË É ÄÌÑ ÏÛÉÂÏÞÎÏÇÏ ÓÏÂÙÔÉÑ.</para> >418c443 >< ÓÏÂÙÔÉÊ.</para> >--- >> ÓÏÂÙÔÉÊ × ÄÁÎÎÏÍ ËÌÁÓÓÅ.</para> >423c448 >< ÓÏÂÙÔÉÊ.</para> >--- >> ÓÏÂÙÔÉÊ × ÄÁÎÎÏÍ ËÌÁÓÓÅ.</para> >428c453 >< ÏÛÉÂÏÞÎÙÈ ÓÏÂÙÔÉÊ.</para> >--- >> ÏÛÉÂÏÞÎÙÈ ÓÏÂÙÔÉÊ × ÄÁÎÎÏÍ ËÌÁÓÓÅ.</para> >432,433c457,458 >< <para><literal>^-</literal> - ïÔËÌÀÞÅÎÉÅ ÁÕÄÉÔÁ ÏÛÉÂÏÞÎÙÈ >< ÓÏÂÙÔÉÊ.</para> >--- >> <para><literal>^+</literal> - ïÔËÌÀÞÅÎÉÅ ÁÕÄÉÔÁ ÕÓÐÅÛÎÙÈ >> ÓÏÂÙÔÉÊ × ÄÁÎÎÏÍ ËÌÁÓÓÅ.</para> >437,438c462,463 >< <para><literal>^+</literal> - ÷ËÌÀÞÅÎÉÅ ÁÕÄÉÔÁ ÕÓÐÅÛÎÙÈ >< ÓÏÂÙÔÉÊ.</para> >--- >> <para><literal>^-</literal> - ïÔËÌÀÞÅÎÉÅ ÁÕÄÉÔÁ ÏÛÉÂÏÞÎÙÈ >> ÓÏÂÙÔÉÊ × ÄÁÎÎÏÍ ËÌÁÓÓÅ.</para> >457,459c482,483 >< ÏÂÝÉÅ ÎÁÓÔÒÏÊËÉ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ É ÕÓÔÁÎÏ×ËÉ ÐÏ ÕÍÏÌÞÁÎÉÀ ËÁË >< ÄÌÑ ÐÒÉÐÉÓÙ×ÁÅÍÙÈ, ÔÁË É ÄÌÑ ÎÅ-ÐÒÉÐÉÓÙ×ÁÅÍÙÈ ÓÏÂÙÔÉÊ. ÷ÔÏÒÏÊ >< ÉÓÐÏÌØÚÕÅÔÓÑ ÄÌÑ ÎÁÓÔÒÏÊËÉ ÁÕÄÉÔÁ ÐÏÌØÚÏ×ÁÔÅÌØÓËÉÈ ÓÏÂÙÔÉÊ.</para> >--- >> ÏÂÝÉÅ ÎÁÓÔÒÏÊËÉ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ, ×ÔÏÒÏÊ ÍÏÖÅÔ ÉÓÐÏÌØÚÏ×ÁÔØÓÑ >> ÄÌÑ ÂÏÌÅÅ ÔÏÎËÏÊ ÎÁÓÔÒÏÊËÉ ÁÕÄÉÔÁ ÐÏÌØÚÏ×ÁÔÅÌÅÍ.</para> >464,466c488,489 >< <para>æÁÊÌ <filename>audit_control</filename> ÓÏÄÅÒÖÉÔ >< ÎÁÓÔÒÏÊËÉ ÐÏ ÕÍÏÌÞÁÎÉÀ, ËÏÔÏÒÙÅ, ×ÏÚÍÏÖÎÏ, ÐÏÔÒÅÂÕÅÔÓÑ >< ÉÚÍÅÎÉÔØ. óÏÄÅÒÖÉÍÏÅ ÜÔÏÇÏ ÆÁÊÌÁ:</para> >--- >> <para>îÅËÏÔÏÒÙÅ ÎÁÓÔÒÏÊËÉ ÐÏ ÕÍÏÌÞÁÎÉÀ ÄÌÑ ÐÏÄÓÉÓÔÅÍÙ >> ÁÕÄÉÔÁ ÓÏÄÅÒÖÁÔÓÑ × ÆÁÊÌÅ <filename>audit_control</filename>:</para> >475,476c498,502 >< <para>ðÁÒÁÍÅÔÒ <option>dir</option> ÕËÁÚÙ×ÁÅÔ ËÁÔÁÌÏÇ, × >< ËÏÔÏÒÏÍ ÂÕÄÅÔ ÓÏÈÒÁÎÑÔØÓÑ ÖÕÒÎÁÌ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ. ëÁË >--- >> <para>úÁÐÉÓØ <option>dir</option> ÉÓÐÏÌØÚÕÅÔÓÑ ÄÌÑ >> ÕÓÔÁÎÏ×ËÉ ÏÄÎÏÇÏ ÉÌÉ ÂÏÌÅÅ ËÁÔÁÌÏÇÏ×, × >> ËÏÔÏÒÙÈ ÂÕÄÅÔ ÓÏÈÒÁÎÑÔØÓÑ ÖÕÒÎÁÌ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ. åÓÌÉ >> ÕËÁÚÁÎ ÂÏÌÅÅ ÞÅÍ ÏÄÉÎ ËÁÔÁÌÏÇ, ÔÏ ÕËÁÚÁÎÎÙÅ ËÁÔÁÌÏÇÉ >> ÂÕÄÕÔ ÉÓÐÏÌØÚÏ×ÁÔØÓÑ ÐÏ ÏÞÅÒÅÄÉ, ÐÏ ÍÅÒÅ ÚÁÐÏÌÎÅÎÉÑ. ëÁË >479,492c505,513 >< ÐÒÅÄÏÔ×ÒÁÔÉÔØ ÓÂÏÉ × ÒÁÂÏÔÅ ÏÐÅÒÁÃÉÏÎÎÏÊ ÓÉÓÔÅÍÙ, ÅÓÌÉ >< Ó×ÏÂÏÄÎÏÅ ÍÅÓÔÅ ÎÁ ÒÁÚÄÅÌÅ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ ÂÕÄÅÔ >< ÉÓÞÅÒÐÁÎÏ.</para> >< >< <para>ðÁÒÁÍÅÔÒ <option>flags</option> ÉÓÐÏÌØÚÕÅÔÓÑ ÄÌÑ >< ÕÓÔÁÎÏ×ËÉ ÇÌÏÂÁÌØÎÙÈ ÏÐÃÉÊ. úÎÁÞÅÎÉÅ ÜÔÏÇÏ ÐÁÒÁÍÅÔÒÁ >< <option>lo</option> ÎÁÓÔÒÁÉ×ÁÅÔ ÁÕÄÉÔ ÄÌÑ ×ÓÅÈ ÓÏÂÙÔÉÊ >< &man.login.1; É &man.logout.1;. âÏÌÅÅ ÐÏÄÒÏÂÎÙÊ >< ÐÒÉÍÅÒ:</para> >< >< <programlisting>dir:/var/audit >< flags:lo,ad,-all,^-fa,^-fc,^-cl >< minfree:20 >< naflags:lo</programlisting> >--- >> ÐÒÅÄÏÔ×ÒÁÔÉÔØ ÐÅÒÅÓÅÞÅÎÉÅ ÐÏÄÓÉÓÔÅÍÙ ÁÕÄÉÔÁ É ÏÓÔÁÌØÎÙÈ >> ÐÏÄÓÉÓÔÅÍ × ÓÌÕÞÁÅ, ÅÓÌÉ Ó×ÏÂÏÄÎÏÅ ÍÅÓÔÅ ÎÁ ÒÁÚÄÅÌÅ >> ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ ÂÕÄÅÔ ÉÓÞÅÒÐÁÎÏ.</para> >> >> <para>úÁÐÉÓØ <option>flags</option> ÉÓÐÏÌØÚÕÅÔÓÑ ÄÌÑ >> ÕÓÔÁÎÏ×ËÉ ÇÌÏÂÁÌØÎÏÊ ÍÁÓËÉ ÐÒÅÄ×ÁÒÉÔÅÌØÎÏÇÏ ×ÙÂÏÒÁ >> ÄÌÑ ÐÒÉÐÉÓÙ×ÁÅÍÙÈ ÓÏÂÙÔÉÊ. ÷ ÐÒÉÍÅÒÅ ×ÙÛÅ, ÂÕÄÕÔ ÐÏÄ×ÅÒÇÁÔØÓÑ >> ÁÕÄÉÔÕ ËÁË ÕÓÐÅÛÎÙÅ, ÔÁË É ÎÅÕÄÁÞÎÙÅ ÐÏÐÙÔËÉ ×ÈÏÄÁ × >> ÓÉÓÔÅÍÕ É ×ÙÈÏÄÁ ÉÚ ÎÅÅ ÄÌÑ ×ÓÅÈ ÐÏÌØÚÏ×ÁÔÅÌÅÊ</para> >494,508c515 >< <para>ôÁËÏÅ ÚÎÁÞÅÎÉÅ ÐÁÒÁÍÅÔÒÁ <option>flags</option> >< ÐÒÉ×ÅÄÅÔ Ë ÁÕÄÉÔÕ ×ÓÅÈ ÓÏÂÙÔÉÊ &man.login.1; É >< &man.logout.1;, ×ÓÅÈ ÁÄÍÉÎÉÓÔÒÁÔÉ×ÎÙÈ ÓÏÂÙÔÉÊ, ×ÓÅÈ ÏÛÉÂÏÞÎÙÈ >< ÓÉÓÔÅÍÎÙÈ ÓÏÂÙÔÉÊ É, ÎÁËÏÎÅÃ, ÏÔËÌÀÞÁÅÔ ÁÕÄÉÔ ×ÓÅÈ ÏÛÉÂÏÞÎÙÈ >< ÓÏÂÙÔÉÊ ËÌÁÓÓÏ× <option>fa</option>, <option>fc</option> É >< <option>cl</option>. îÅÓÍÏÔÒÑ ÎÁ ÔÏ, ÞÔÏ ÐÁÒÁÍÅÔÒ >< <option>-all</option> ÕËÁÚÙ×ÁÅÔ ÎÁ ÎÅÏÂÈÏÄÉÍÏÓÔØ ÁÕÄÉÔÁ >< ×ÓÅÈ ÓÉÓÔÅÍÎÙÈ ÓÏÂÙÔÉÊ, ÐÒÅÆÉËÓ <option>^-</option> ÏÔÍÅÎÑÅÔ >< ÜÔÏ ÐÏ×ÅÄÅÎÉÅ ÄÌÑ ×ÓÅÈ ÐÏÓÌÅÄÕÀÝÉÈ ÏÐÃÉÊ.</para> >< >< <para>úÁÍÅÔØÔÅ, ÞÔÏ ÚÎÁÞÅÎÉÑ ÓÞÉÔÙ×ÁÀÔÓÑ ÓÌÅ×Á ÎÁÐÒÁ×Ï. >< ðÏÜÔÏÍÕ ÎÁÈÏÄÑÝÉÅÓÑ ÓÐÒÁ×Á ÚÎÁÞÅÎÉÑ ÐÅÒÅÏÐÒÅÄÅÌÑÀÔ ÚÎÁÞÅÎÉÑ, >< ÎÁÈÏÄÑÝÉÅÓÑ ÓÌÅ×Á.</para> >< >< <para>ðÁÒÁÍÅÔÒ <option>minfree</option> ÏÐÒÅÄÅÌÑÅÔ ÍÉÎÉÍÁÌØÎÏÅ >--- >> <para>úÁÐÉÓØ <option>minfree</option> ÏÐÒÅÄÅÌÑÅÔ ÍÉÎÉÍÁÌØÎÏÅ >510,520c517,544 >< ËÏÔÏÒÙÊ ÓÏÈÒÁÎÑÀÔÓÑ ÆÁÊÌÙ ÖÕÒÎÁÌÏ× ÁÕÄÉÔÁ. îÁÐÒÉÍÅÒ, ÅÓÌÉ >< ÚÎÁÞÅÎÉÅ ÐÁÒÁÍÅÔÒÁ <option>dir</option> ÕÓÔÁÎÏ×ÌÅÎÏ × >< <filename>/var/audit</filename>, Á ÐÁÒÁÍÅÔÒ >< <option>minfree</option> ÒÁ×ÅÎ Ä×ÁÄÃÁÔÉ (20), ÔÏ ÐÒÅÄÕÐÒÅÖÄÁÀÝÅÅ >< ÓÏÏÂÝÅÎÉÅ ÂÕÄÅÔ ×ÙÄÁÎÏ, ËÏÇÄÁ ÒÁÚÄÅÌ <filename>/var</filename> ÂÕÄÅÔ ÚÁÐÏÌÎÅÎ ÎÁ >< ×ÏÓÅÍØÄÅÓÑÔ (80%) ÐÒÏÃÅÎÔÏ×.</para> >< >< <para>ðÁÒÁÍÅÔÒ <option>naflags</option> ÏÐÒÅÄÅÌÑÅÔ ËÌÁÓÓÙ >< ÁÕÄÉÔÁ ÄÌÑ ÎÅ-ÐÒÉÐÉÓÙ×ÁÅÍÙÈ ÓÏÂÙÔÉÊ, ÔÏ ÅÓÔØ ÓÏÂÙÔÉÊ, >< ÄÌÑ ËÏÔÏÒÙÈ ÎÅ ÏÐÒÅÄẠ̊ΠËÏÎËÒÅÔÎÙÊ ÐÏÌØÚÏ×ÁÔÅÌØ.</para> >< >--- >> ËÏÔÏÒÙÊ ÓÏÈÒÁÎÑÀÔÓÑ ÆÁÊÌÙ ÖÕÒÎÁÌÏ× ÁÕÄÉÔÁ. ëÏÇÄÁ ÄÁÎÎÁÑ >> ÇÒÁÎÉÃÁ ÂÕÄÅÔ ÐÒÅ×ÙÛÅÎÁ, ÂÕÄÅÔ ÓÇÅÎÅÒÉÒÏ×ÁÎÏ ÐÒÅÄÕÐÒÅÖÄÅÎÉÅ. >> ÷ÙÛÅÐÒÉ×ÅÄÅÎÎÙÊ ÐÒÉÍÅÒ ÕÓÔÁÎÁ×ÌÉ×ÁÅÔ ÍÉÎÉÍÁÌØÎÏÅ Ó×ÏÂÏÄÎÏÅ >> ÐÒÏÓÔÒÁÎÓÔ×Ï × Ä×ÁÄÃÁÔØ ÐÒÏÃÅÎÔÏ×.</para> >> >> <para>úÁÐÉÓØ <option>naflags</option> ÏÐÒÅÄÅÌÑÅÔ ËÌÁÓÓÙ >> ÁÕÄÉÔÁ ÄÌÑ ÎÅ-ÐÒÉÐÉÓÙ×ÁÅÍÙÈ ÓÏÂÙÔÉÊ, ÎÁÐÒÉÍÅÒ, ÐÒÏÃÅÓÓÏ× >> ×ÈÏÄÁ × ÓÉÓÔÅÍÕ É ÓÉÓÔÅÍÎÙÈ ÄÅÍÏÎÏ×.</para> >> >> <para>úÁÐÉÓØ <option>policy</option> ÏÐÒÅÄÅÌÑÅÔ ÓÐÉÓÏË >> ÆÌÁÇÏ× ÐÏÌÉÔÉËÉ, ÏÐÒÅÄÅÌÑÀÝÅÊ ÒÁÚÌÉÞÎÙÅ ÁÓÐÅËÔÙ ÐÏ×ÅÄÅÎÉÑ >> ÁÕÄÉÔÁ. üÌÅÍÅÎÔÙ ÓÐÉÓËÁ ÏÔÄÅÌÑÀÔÓÑ ÄÒÕÇ ÏÔ ÄÒÕÇÁ ÚÁÐÑÔÙÍÉ. >> ðÏ ÕÍÏÌÞÁÎÉÀ, ÆÌÁÇ <literal>cnt</literal> ÕËÁÚÙ×ÁÅÔ, ÞÔÏ >> ÓÉÓÔÅÍÁ ÄÏÌÖÎÁ ÐÒÏÄÏÌÖÁÔØ ÒÁÂÏÔÁÔØ, ÎÅÓÍÏÔÒÑ ÎÁ ÏÛÉÂËÉ >> ÁÕÄÉÔÁ (ÄÁÎÎÙÊ ÆÌÁÇ ÏÞÅÎØ ÓÉÌØÎÏ ÒÅËÏÍÅÎÄÕÅÔÓÑ ÉÓÐÏÌØÚÏ×ÁÔØ). >> äÒÕÇÏÊ ÞÁÓÔÏÉÓÐÏÌØÚÕÅÍÙÊ ÆÌÁÇ - <literal>argv</literal>, >> ËÏÔÏÒÙÊ ÚÁÓÔÁ×ÌÑÅÔ ÐÏÄ×ÅÒÇÁÔØ ÁÕÄÉÔÕ ÁÒÇÕÍÅÎÔÙ ËÏÍÁÎÄÎÏÊ >> ÓÔÒÏËÉ ÐÒÉ ×ÙÚÏ×Å ÓÉÓÔÅÍÎÏÇÏ ×ÙÚÏ×Á &man.execve.2;, ËÁË >> ÞÁÓÔØ ×ÙÐÏÌÎÅÎÉÑ ËÏÍÁÎÄÙ.</para> >> >> <para>úÁÐÉÓØ <option>filesz</option> ÏÐÒÅÄÅÌÑÅÔ >> ÍÁËÓÉÍÁÌØÎÙÊ ÒÁÚÍÅÒ × ÂÁÊÔÁÈ, ÄÏ ËÏÔÏÒÏÇÏ ÍÏÖÅÔ ÒÁÓÔÉ >> ÖÕÒÎÁÌ ÓÏÂÙÔÉÊ ÁÕÄÉÔÁ, ÐÒÅÖÄÅ ÞÅÍ ÏÎ ÂÕÄÅÔ Á×ÔÏÍÁÔÉÞÅÓËÉ >> ÚÁËÏÎÞÅÎ É ÐÏÄ×ÅÒÇÎÕÔ ÒÏÔÁÃÉÉ. ðÏ ÕÍÏÌÞÁÎÉÀ, ÚÎÁÞÅÎÉÅ 0 >> ÚÁÐÒÅÝÁÅÔ Á×ÔÏÍÁÔÉÞÅÓËÕÀ ÒÏÔÁÃÉÀ ÌÏÇÏ×. åÓÌÉ ÔÒÅÂÕÅÍÙÊ >> ÒÁÚÍÅÒ ÆÁÊÌÁ ÎÅÎÕÌÅ×ÏÊ, ÎÏ ÎÉÖÅ ÍÉÎÉÍÁÌØÎÏÇÏ ÚÎÁÞÅÎÉÑ × >> 512ë, ÔÏ ÏÎ ÂÕÄÅÔ ÐÒÏÉÇÎÏÒÉÒÏ×ÁÎ, É ÂÕÄÅÔ ÓÇÅÎÅÒÉÒÏ×ÁÎÏ >> ÐÒÅÄÕÐÒÅÖÄÁÀÝÅÅ ÓÏÏÂÝÅÎÉÅ × ÌÏÇÁÈ.</para> >526,546c550,575 >< <para>æÁÊÌ <filename>audit_user</filename> ÐÏÚ×ÏÌÑÅÔ >< ÁÄÍÉÎÉÓÔÒÁÔÏÒÕ ÏÐÒÅÄÅÌÉÔØ ËÌÁÓÓÙ ÓÏÂÙÔÉÊ, ÁÕÄÉÔ ËÏÔÏÒÙÈ ÂÕÄÅÔ >< ÐÒÏÉÚ×ÏÄÉÔØÓÑ ÄÌÑ ËÁÖÄÏÇÏ ÐÏÌØÚÏ×ÁÔÅÌÑ ÓÉÓÔÅÍÙ.</para> >< >< <para>ðÏ ÕÍÏÌÞÁÎÉÀ ÆÁÊÌ <filename>audit_user</filename> >< ÓÏÄÅÒÖÉÔ:</para> >< >< <programlisting>root:lo:no >< audit:fc:no</programlisting> >< >< <para>ïÂÒÁÔÉÔÅ ×ÎÉÍÁÎÉÅ: ÐÏ ÕÍÏÌÞÁÎÉÀ ÐÒÏÉÚ×ÏÄÉÔÓÑ ÁÕÄÉÔ ×ÓÅÈ >< <command>login</command>/<command>logout</command> ÓÏÂÙÔÉÊ É >< ÏÔËÌÀÞÁÅÔÓÑ ÁÕÄÉÔ ×ÓÅÈ ÄÒÕÇÉÈ ÓÏÂÙÔÉÊ ÄÌÑ ÐÏÌØÚÏ×ÁÔÅÌÑ >< <systemitem class="username">root</systemitem>. üÔÁ ËÏÎÆÉÇÕÒÁÃÉÑ ÔÁËÖÅ ×ËÌÀÞÁÅÔ >< ÁÕÄÉÔ ×ÓÅÈ ÓÏÂÙÔÉÊ, Ó×ÑÚÁÎÎÙÈ Ó ÓÏÚÄÁÎÉÅÍ ÆÁÊÌÏ× É ÏÔËÌÀÞÁÅÔ >< ÁÕÄÉÔ ×ÓÅÈ ÄÒÕÇÉÈ ÓÏÂÙÔÉÊ ÄÌÑ ÐÏÌØÚÏ×ÁÔÅÌÑ >< <systemitem class="username">audit</systemitem>. èÏÔÑ ÉÓÐÏÌØÚÏ×ÁÎÉÅ ÓÉÓÔÅÍÙ >< ÁÕÄÉÔÁ ÎÅ ÔÒÅÂÕÅÔ ÎÁÌÉÞÉÑ × ÓÉÓÔÅÍÅ ÓÐÅÃÉÁÌØÎÏÇÏ >< ÐÏÌØÚÏ×ÁÔÅÌÑ, × ÎÅËÏÔÏÒÙÈ ËÏÎÆÉÇÕÒÁÃÉÑÈ, ÏÓÏÂÅÎÎÏ >< ÉÓÐÏÌØÚÕÀÝÉÈ <acronym>MAC</acronym> (Mandatory Access >< Control), ÜÔÏ ÍÏÖÅÔ ÂÙÔØ ÎÅÏÂÈÏÄÉÍÏ.</para> >--- >> <para>áÄÍÉÎÉÓÔÒÁÔÏÒ ÍÏÖÅÔ ÏÐÒÅÄÅÌÉÔØ ÄÏÐÏÌÎÉÔÅÌØÎÙÅ >> ÔÒÅÂÏ×ÁÎÉÑ Ë ÁÕÄÉÔÕ ÄÌÑ ËÏÎËÒÅÔÎÙÈ ÐÏÌØÚÏ×ÁÔÅÌÅÊ >> × ÆÁÊÌÅ <filename>audit_user</filename>. >> ëÁÖÄÁÑ ÓÔÒÏËÁ ËÏÎÆÉÇÕÒÉÒÕÅÔ ÁÕÄÉÔ ÄÌÑ ÐÏÌØÚÏ×ÁÔÅÌÑ >> Ó ÉÓÐÏÌØÚÏ×ÁÎÉÅÍ Ä×ÕÈ ÐÏÌÅÊ: ÐÅÒ×ÏÅ ÐÏÌÅ >> <literal>alwaysaudit</literal>, ËÏÔÏÒÏÅ ÏÐÒÅÄÅÌÑÅÔ >> ÎÁÂÏÒ ÓÏÂÙÔÉÊ, ËÏÔÏÒÙÅ ÄÏÌÖÎÙ ×ÓÅÇÄÁ ÐÏÄ×ÅÒÇÁÔØÓÑ >> ÁÕÄÉÔÕ ÄÌÑ ÄÁÎÎÏÇÏ ÐÏÌØÚÏ×ÁÔÅÌÑ, Á ×ÔÏÒÏÅ - ÐÏÌÅ >> <literal>neveraudit</literal>, ËÏÔÏÒÏÅ ÏÐÒÅÄÅÌÑÅÔ >> ÎÁÂÏÒ ÓÏÂÙÔÉÊ, ËÏÔÏÒÙÅ ÎÉËÏÇÄÁ ÎÅ ÄÏÌÖÎÙ ÐÏÄ×ÅÒÇÁÔØÓÑ >> ÁÕÄÉÔÕ ÄÌÑ ÐÏÌØÚÏ×ÁÔÅÌÑ.</para> >> >> <para>îÉÖÅÓÌÅÄÕÀÝÉÊ ÐÒÉÍÅÒ <filename>audit_user</filename> >> ÐÒÏ×ÏÄÉÔ ÁÕÄÉÔ ×ÓÅÈ ÓÏÂÙÔÉÊ ×ÈÏÄÁ × ÓÉÓÔÅÍÕ É ×ÙÈÏÄÁ ÉÚ >> ÓÉÓÔÅÍÙ ÄÌÑ ÐÏÌØÚÏ×ÁÔÅÌÑ <systemitem class="username">root</systemitem>, >> Á ÔÁËÖÅ ÐÒÏ×ÏÄÉÔ ÁÕÄÉÔ ×ÓÅÈ ÓÏÂÙÔÉÊ, Ó×ÑÚÁÎÎÙÈ Ó ÓÏÚÄÁÎÉÅÍ >> ÆÁÊÌÏ× É ÕÓÐÅÛÎÙÍ ×ÙÐÏÌÎÅÎÉÅÍ ËÏÍÁÎÄ ÄÌÑ ÐÏÌØÚÏ×ÁÔÅÌÑ >> <systemitem class="username">www</systemitem>. ðÒÉ ÉÓÐÏÌØÚÏ×ÁÎÉÉ Ó >> ×ÙÛÅÐÒÉ×ÅÄÅÎÎÙÍ ÐÒÉÍÅÒÏÍ ÆÁÊÌÁ <filename>audit_control</filename>, >> ÚÁÐÉÓØ <literal>lo</literal> ÄÌÑ <systemitem class="username">root</systemitem> >> Ñ×ÌÑÅÔÓÑ ÌÉÛÎÅÊ, ËÒÏÍÅ ÔÏÇÏ, ÓÏÂÙÔÉÑ ×ÈÏÄÁ × ÓÉÓÔÅÍÕ É ×ÙÈÏÄÁ >> ÉÚ ÓÉÓÔÅÍÙ ÂÕÄÕÔ ÐÏÄ×ÅÒÇÁÔØÓÑ ÁÕÄÉÔÕ É ÄÌÑ ÐÏÌØÚÏ×ÁÔÅÌÑ >> <systemitem class="username">www</systemitem>.</para> >> >> <programmlisting>root:lo,+ex:no >> www:fc,+ex:no</programlisting> >553c582 >< <title>áÄÍÉÎÉÓÔÒÉÒÏ×ÁÎÉÅ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ</title> >--- >> <title>áÄÍÉÎÉÓÔÒÉÒÏ×ÁÎÉÅ ÐÏÄÓÉÓÔÅÍÙ ÁÕÄÉÔÁ</title> >560,561c589,590 >< ÕÔÉÌÉÔÙ. ëÏÍÁÎÄÁ <command>praudit</command> ÐÒÅÏÂÒÁÚÕÅÔ ÖÕÒÎÁÌ ÁÕÄÉÔÁ >< × ÔÅËÓÔÏ×ÙÊ ÆÏÒÍÁÔ; ËÏÍÁÎÄÁ <command>auditreduce</command> ÍÏÖÅÔ ÂÙÔØ >--- >> ÕÔÉÌÉÔÙ. ëÏÍÁÎÄÁ &man.praudit.1; ÐÒÅÏÂÒÁÚÕÅÔ ÖÕÒÎÁÌ ÁÕÄÉÔÁ >> × ÔÅËÓÔÏ×ÙÊ ÆÏÒÍÁÔ; ËÏÍÁÎÄÁ &man.auditreduce.1; ÍÏÖÅÔ ÂÙÔØ >563,566c592,595 >< ÁÒÈÉ×ÉÒÏ×ÁÎÉÑ ÉÌÉ ÒÁÓÐÅÞÁÔËÉ. ëÏÍÁÎÄÁ <command>auditreduce</command> >< ÐÏÄÄÅÒÖÉ×ÁÅÔ ÍÎÏÖÅÓÔ×Ï ÐÁÒÁÍÅÔÒÏ× ×ÙÂÏÒËÉ, ×ËÌÀÞÁÑ ÔÉÐÙ ÓÏÂÙÔÉÊ, ËÌÁÓÓÙ >< ÓÏÂÙÔÉÊ, ÐÏÌØÚÏ×ÁÔÅÌØÓËÉÅ ÓÏÂÙÔÉÑ, ÄÁÔÕ É ×ÒÅÍÑ ÓÏÂÙÔÉÊ É ÐÕÔÉ ÆÁÊÌÏ×, >< Ë ËÏÔÏÒÙÍ ÏÔÎÏÓÑÔÓÑ ÓÏÂÙÔÉÑ.</para> >--- >> ÁÒÈÉ×ÉÒÏ×ÁÎÉÑ ÉÌÉ ÒÁÓÐÅÞÁÔËÉ. íÎÏÖÅÓÔ×Ï ÐÁÒÁÍÅÔÒÏ× ×ÙÂÏÒËÉ >> ÐÏÄÄÅÒÖÉ×ÁÀÔÓÑ ËÏÍÁÎÄÏÊ &man.auditreduce.1;, ×ËÌÀÞÁÑ ÔÉÐÙ >> ÓÏÂÙÔÉÊ, ËÌÁÓÓÙ ÓÏÂÙÔÉÊ, ËÏÎËÒÅÔÎÏÇÏ ÐÏÌØÚÏ×ÁÔÅÌÑ, ÄÁÔÕ É >> ×ÒÅÍÑ ÓÏÂÙÔÉÊ,Á ÔÁËÖÅ ÐÕÔÉ ÆÁÊÌÏ×, Ë ËÏÔÏÒÙÍ ÏÔÎÏÓÑÔÓÑ ÓÏÂÙÔÉÑ.</para> >568c597 >< <para>îÁÐÒÉÍÅÒ, ÕÔÉÌÉÔÁ <command>praudit</command> ×Ù×ÅÄÅÔ ×ÓÅ ÓÏÄÅÒÖÉÍÏÅ >--- >> <para>îÁÐÒÉÍÅÒ, ÕÔÉÌÉÔÁ &man.praudit.1; ×Ù×ÅÄÅÔ ×ÓÅ ÓÏÄÅÒÖÉÍÏÅ >573c602 >< <para>÷ ÄÁÎÎÏÍ ÐÒÉÍÅÒÅ <replaceable>AUDITFILE</replaceable> - ÖÕÒÎÁÌ, >--- >> <para>÷ ÄÁÎÎÏÍ ÐÒÉÍÅÒÅ <filename>AUDITFILE</filename> - ÖÕÒÎÁÌ, >577,580c606,609 >< ÏÞÅÒÅÄØ ÓÏÓÔÏÑÔ ÉÚ ÜÌÅÍÅÎÔÏ×. üÔÉ ÜÌÅÍÅÎÔÙ ËÏÍÁÎÄÁ >< <command>praudit</command> ×Ù×ÏÄÉÔ ÐÏÓÌÅÄÏ×ÁÔÅÌØÎÏ - ÐÏ ÏÄÎÏÍÕ ÎÁ ÓÔÒÏËÕ. >< ëÁÖÄÙÊ ÜÌÅÍÅÎÔ ÉÍÅÅÔ ÓÐÅÃÉÆÉÞÅÓËÉÊ ÔÉÐ, ÎÁÐÒÉÍÅÒ >< <literal>ÚÁÇÏÌÏ×ÏË</literal> (header) ÓÏÄÅÒÖÉÔ ÚÁÇÏÌÏ×ÏË pfgbcb, a >--- >> ÏÞÅÒÅÄØ ÓÏÓÔÏÑÔ ÉÚ ÜÌÅÍÅÎÔÏ×, ËÏÔÏÒÙÅ ËÏÍÁÎÄÁ &man.praudit.1; >> ×Ù×ÏÄÉÔ ÐÏÓÌÅÄÏ×ÁÔÅÌØÎÏ - ÐÏ ÏÄÎÏÍÕ ÎÁ ÓÔÒÏËÕ. ëÁÖÄÙÊ ÜÌÅÍÅÎÔ >> ÉÍÅÅÔ ÓÐÅÃÉÆÉÞÅÓËÉÊ ÔÉÐ, ÎÁÐÒÉÍÅÒ >> <literal>ÚÁÇÏÌÏ×ÏË</literal> (header) ÓÏÄÅÒÖÉÔ ÚÁÇÏÌÏ×ÏË ÚÁÐÉÓÉ, a >582,583c611 >< lookup. óÌÅÄÕÀÝÉÊ ÐÒÉÍÅÒ ÐÏËÁÚÙ×ÁÅÔ ÚÁÐÉÓØ ÄÌÑ ÓÏÂÙÔÉÑ ×ÙÐÏÌÎÅÎÉÑ >< (execve):</para> >--- >> óÌÅÄÕÀÝÉÊ ÐÒÉÍÅÒ ÐÏËÁÚÙ×ÁÅÔ ÚÁÐÉÓØ ÄÌÑ ÓÏÂÙÔÉÑ <literal>execve</literal>:</para> >593c621 >< <para>üÔÁ ÚÁÐÉÓØ Ñ×ÌÑÅÔÓÑ ÒÅÚÕÌØÔÁÔÏÍ ÕÓÐÅÛÎÏÇÏ ×ÙÐÏÌÎÅÎÉÑ ÓÉÓÔÅÍÎÏÇÏ >--- >> <para>üÔÁ ÚÁÐÉÓØ ÏÔÒÁÖÁÅÔ ÒÅÚÕÌØÔÁÔ ÕÓÐÅÛÎÏÇÏ ×ÙÐÏÌÎÅÎÉÑ ÓÉÓÔÅÍÎÏÇÏ >595,596c623,624 >< ËÏÍÁÎÄÙ <literal>finger doug</literal>. üÌÅÍÅÎÔ <literal>exec</literal> ÓÏÄÅÒÖÉÔ É >< ËÏÍÁÎÄÕ, ËÏÔÏÒÕÀ ÏÂÏÌÏÞËÁ ÐÅÒÅÄÁÌÁ ÑÄÒÕ, É ÅÅ ÁÒÇÕÍÅÎÔÙ. üÌÅÍÅÎÔ >--- >> ËÏÍÁÎÄÙ <literal>finger doug</literal>. ÷ ÜÌÅÍÅÎÔÁÈ ÚÁÐÉÓÉ ÅÓÔØ É >> ËÏÍÁÎÄÎÁÑ ÓÔÒÏËÁ, ËÏÔÏÒÕÀ ÏÂÏÌÏÞËÁ ÐÅÒÅÄÁÌÁ ÑÄÒÕ. üÌÅÍÅÎÔ >599,610c627,640 >< ÏÐÉÓÙ×ÁÅÔ ÉÓÐÏÌÎÑÅÍÙÊ ÆÁÊÌ, É, × ÞÁÓÔÎÏÓÔÉ, ÐÒÁ×Á ÄÏÓÔÕÐÁ Ë ÆÁÊÌÕ. >< üÌÅÍÅÎÔ <literal>ÓÕÂßÅËÔ</literal> (subject) ÏÐÉÓÙ×ÁÅÔ ÐÒÏÃÅÓÓ, ×ÙÚ×Á×ÛÉÊ >< ×ÙÐÏÌÎÅÎÉÅ É ÓÏÈÒÁÎÑÅÔ ÅÇÏ × ×ÉÄÅ ÒÑÄÁ ÚÎÁÞÅÎÉÊ, ÐÒÅÄÓÔÁ×ÌÑÀÝÉÈ ÓÏÂÏÊ >< UID ÁÕÄÉÒÕÅÍÏÇÏ ÐÏÌØÚÏ×ÁÔÅÌÑ, ÉÓÐÏÌÎÑÀÝÉÅ (effective) UID É GID, >< ÒÅÁÌØÎÙÅ (real) UID É GID, ÉÄÅÎÔÉÆÉËÁÔÏÒ ÐÒÏÃÅÓÓÁ, ÉÄÅÎÔÉÆÉËÁÔÏÒ ÓÅÓÓÉÉ, >< ÐÏÒÔ É ÁÄÒÅÓ, Ó ËÏÔÏÒÏÇÏ ÂÙÌ ÏÓÕÝÅÓÔ×ÌÅÎ ×ÈÏÄ × ÓÉÓÔÅÍÕ. >< ïÂÒÁÔÉÔÅ ×ÎÉÍÁÎÉÅ - ÉÄÅÎÔÉÆÉËÁÔÏÒ ÁÕÄÉÒÕÅÍÏÇÏ ÐÏÌØÚÏ×ÁÔÅÌÑ É ÒÅÁÌØÎÙÊ >< ÉÄÅÎÔÉÆÉËÁÔÏÒ ÐÏÌØÚÏ×ÁÔÅÌÑ ÏÔÌÉÞÁÀÔÓÑ: ÜÔÏ ÚÎÁÞÉÔ, ÞÔÏ ÐÏÌØÚÏ×ÁÔÅÌØ >< <literal>robert</literal> ÐÏ×ÙÓÉÌ ÐÒÉ×ÉÌÅÇÉÉ ÄÏ ÐÏÌØÚÏ×ÁÔÅÌÑ >< <literal>root</literal> ÐÅÒÅÄ ×ÙÐÏÌÎÅÎÉÅÍ ËÏÍÁÎÄÙ, ÎÏ ÓÉÓÔÅÍÁ ÁÕÄÉÔÁ >< ÚÁÎÅÓÌÁ ÅÇÏ ÄÅÊÓÔ×ÉÑ × ÖÕÒÎÁÌ ÉÓÐÏÌØÚÕÑ ÉÚÎÁÞÁÌØÎÙÊ ÉÄÅÎÔÉÆÉËÁÔÏÒ. >< îÁËÏÎÅÃ, ÜÌÅÍÅÎÔ <literal>×ÏÚ×ÒÁÔ</literal> (return) ÏÐÉÓÙ×ÁÅÔ ÕÓÐÅÛÎÏÅ >--- >> ÏÐÉÓÙ×ÁÅÔ ÉÓÐÏÌÎÑÅÍÙÊ ÆÁÊÌ, É, × ÞÁÓÔÎÏÓÔÉ, ÒÅÖÉÍ ÆÁÊÌÁ, ÞÔÏ >> ÍÏÖÎÏ ÉÓÐÏÌØÚÏ×ÁÔØ ÄÌÑ ÏÐÒÅÄÅÌÅÎÉÑ, ÉÓÐÏÌØÚÏ×ÁÌÏ ÌÉ ÐÒÉÌÏÖÅÎÉÅ >> setuid. üÌÅÍÅÎÔ <literal>ÓÕÂßÅËÔ</literal> (subject) ÏÐÉÓÙ×ÁÅÔ ÐÒÏÃÅÓÓ, ×ÙÚ×Á×ÛÉÊ >> É ÓÏÈÒÁÎÑÅÔ ÅÇÏ × ×ÉÄÅ ÒÑÄÁ ÚÎÁÞÅÎÉÊ, ÐÒÅÄÓÔÁ×ÌÑÀÝÉÈ ÓÏÂÏÊ >> ID ÁÕÄÉÒÕÅÍÏÇÏ ÐÏÌØÚÏ×ÁÔÅÌÑ, ÉÓÐÏÌÎÑÀÝÉÅ (effective) UID É GID, >> ÒÅÁÌØÎÙÅ ID ÐÏÌØÚÏ×ÁÔÅÌÑ É ÇÒÕÐÐÙ, ÉÄÅÎÔÉÆÉËÁÔÏÒ ÐÒÏÃÅÓÓÁ, >> ÉÄÅÎÔÉÆÉËÁÔÏÒ ÓÅÓÓÉÉ, ÐÏÒÔ É ÁÄÒÅÓ, Ó ËÏÔÏÒÏÇÏ ÂÙÌ ÏÓÕÝÅÓÔ×ÌÅÎ >> ×ÈÏÄ × ÓÉÓÔÅÍÕ. ïÂÒÁÔÉÔÅ ×ÎÉÍÁÎÉÅ - ÉÄÅÎÔÉÆÉËÁÔÏÒ ÁÕÄÉÒÕÅÍÏÇÏ >> ÐÏÌØÚÏ×ÁÔÅÌÑ É ÒÅÁÌØÎÙÊ ÉÄÅÎÔÉÆÉËÁÔÏÒ ÐÏÌØÚÏ×ÁÔÅÌÑ ÏÔÌÉÞÁÀÔÓÑ: >> ÜÔÏ ÚÎÁÞÉÔ, ÞÔÏ ÐÏÌØÚÏ×ÁÔÅÌØ <systemitem class="username">robert</systemitem> ÐÏ×ÙÓÉÌ >> ÐÒÉ×ÉÌÅÇÉÉ ÄÏ ÐÏÌØÚÏ×ÁÔÅÌÑ <systemitem class="username">root</systemitem> ÐÅÒÅÄ >> ×ÙÐÏÌÎÅÎÉÅÍ ËÏÍÁÎÄÙ, ÎÏ ÓÉÓÔÅÍÁ ÁÕÄÉÔÁ ÚÁÎÅÓÌÁ ÅÇÏ ÄÅÊÓÔ×ÉÑ × >> ÖÕÒÎÁÌ ÉÓÐÏÌØÚÕÑ ÉÚÎÁÞÁÌØÎÙÊ ÉÄÅÎÔÉÆÉËÁÔÏÒ. îÁËÏÎÅÃ, ÜÌÅÍÅÎÔ >> <literal>×ÏÚ×ÒÁÔ</literal> (return) ÏÐÉÓÙ×ÁÅÔ ÕÓÐÅÛÎÏÅ >613a644,647 >> <para>äÁÎÎÙÅ × ÆÏÒÍÁÔÅ <acronym>XML</acronym> ÔÁËÖÅ ÍÏÖÎÏ >> ×Ù×ÅÓÔÉ Ó ÐÏÍÏÝØÀ ËÏÍÁÎÄÙ &man.praudit.1;, ÉÓÐÏÌØÚÕÑ ÁÒÇÕÍÅÎÔ >> <option>-x</option>.</para> >> >625,626c659,660 >< <para>üÔÁ ËÏÍÁÎÄÁ ×ÙÄÅÌÉÔ ×ÓÅ ÚÁÐÉÓÉ, ÏÔÎÏÓÑÝÉÅÓÑ Ë ÐÏÌØÚÏ×ÁÔÅÌÀ >< <systemitem class="username">trhodes</systemitem>, ËÏÔÏÒÙÅ ÈÒÁÎÑÔÓÑ × ÆÁÊÌÅ >--- >> <para>üÔÁ ËÏÍÁÎÄÁ ×ÙÄÅÌÉÔ ×ÓÅ ÚÁÐÉÓÉ, ÏÔÎÏÓÑÝÉÅÓÑ Ë >> <systemitem class="username">trhodes</systemitem>, ËÏÔÏÒÙÅ ÈÒÁÎÑÔÓÑ × >634c668,669 >< Ë ÖÕÒÎÁÌÕ ÁÕÄÉÔÁ, ÎÁÈÏÄÑÝÅÍÕÓÑ × <filename>/var/audit</filename>; >--- >> Ë ÖÕÒÎÁÌÕ ÁÕÄÉÔÁ, ÎÁÈÏÄÑÝÅÍÕÓÑ × >> <filename>/var/audit</filename>; >639,641c674,676 >< ÉÎÆÏÒÍÁÃÉÉ Ï ÐÏ×ÅÄÅÎÉÉ ÐÏÌØÚÏ×ÁÔÅÌÅÊ É ÐÒÏÃÅÓÓÏ×, ÞÔÏ ÍÏÖÅÔ ÐÒÉ×ÅÓÔÉ Ë >< ÒÁÓËÒÙÔÉÀ ËÏÎÆÉÄÅÎÃÉÁÌØÎÙÈ ÄÁÎÎÙÈ. ðÏÜÔÏÍÕ, ÒÅËÏÍÅÎÄÕÅÔÓÑ ÄÅÌÅÇÉÒÏ×ÁÔØ >< ÐÒÁ×Á ÎÁ ÞÔÅÎÉÅ ÖÕÒÎÁÌÁ ÁÕÄÉÔÁ Ó ÂÏÌØÛÏÊ ÏÓÔÏÒÏÖÎÏÓÔØÀ.</para> >--- >> ÉÎÆÏÒÍÁÃÉÉ Ï ÐÏ×ÅÄÅÎÉÉ ÐÏÌØÚÏ×ÁÔÅÌÅÊ É ÐÒÏÃÅÓÓÏ×, ÐÏÜÔÏÍÕ, >> ÒÅËÏÍÅÎÄÕÅÔÓÑ ÄÅÌÅÇÉÒÏ×ÁÔØ ÐÒÁ×Á ÎÁ ÞÔÅÎÉÅ ÖÕÒÎÁÌÁ ÁÕÄÉÔÁ >> Ó ÂÏÌØÛÏÊ ÏÓÔÏÒÏÖÎÏÓÔØÀ.</para> >645c680 >< <title>íÏÎÉÔÏÒÉÎÇ ÓÉÓÔÅÍÙ × ÒÅÁÌØÎÏÍ ×ÒÅÍÅÎÉ</title> >--- >> <title>íÏÎÉÔÏÒÉÎÇ ÓÉÓÔÅÍÙ × ÒÅÁÌØÎÏÍ ×ÒÅÍÅÎÉ Ó ÉÓÐÏÌØÚÏ×ÁÎÉÅÍ ÐÏÔÏËÏ× ÁÕÄÉÔÁ</title> >647,655c682,691 >< <para>ðÏÔÏËÉ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ - ËÌÏÎÉÒÏ×ÁÎÎÙÅ ÐÓÅ×ÄÏ-ÕÓÔÒÏÊÓÔ×Á, >< ÉÓÐÏÌØÚÕÑ ËÏÔÏÒÙÅ, ÐÒÉÌÏÖÅÎÉÑ ÍÏÇÕÔ ÐÏÌÕÞÁÔØ ÉÎÆÏÒÍÁÃÉÀ Ï ÓÉÓÔÅÍÎÙÈ >< ÓÏÂÙÔÉÑÈ × ÒÅÁÌØÎÏÍ ×ÒÅÍÅÎÉ. ÷ ÐÅÒ×ÕÀ ÏÞÅÒÅÄØ, ÜÔÏ ÄÏÌÖÎÏ >< ÚÁÉÎÔÅÒÅÓÏ×ÁÔØ Á×ÔÏÒÏ× ÐÒÏÇÒÁÍÍ ÄÌÑ ÍÏÎÉÔÏÒÉÎÇÁ É ÏÐÒÅÄÅÌÅÎÉÑ >< ×ÔÏÒÖÅÎÉÊ × ÓÉÓÔÅÍÕ. ôÅÍ ÎÅ ÍÅÎÅÅ, ÄÌÑ ÁÄÍÉÎÉÓÔÒÁÔÏÒÁ ÐÏÔÏËÉ >< ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ ÍÏÇÕÔ ÓÔÁÔØ ÕÄÏÂÎÙÍ ÉÎÓÔÒÕÍÅÎÔÏÍ ÄÌÑ ÍÏÎÉÔÏÒÉÎÇÁ >< × ÒÅÁÌØÎÏÍ ×ÒÅÍÅÎÉ ÂÅÚ ÔÏÇÏ, ÞÔÏÂÙ ×ÄÁ×ÁÔØÓÑ × ÄÅÔÁÌÉ ÏÂÅÓÐÅÞÅÎÉÑ >< ÂÅÚÏÐÁÓÎÏÓÔÉ ÐÒÉ ÐÅÒÅÄÁÞÉ ÐÒÁ× ÎÁ ÞÔÅÎÉÅ ÖÕÒÎÁÌÁ ÁÕÄÉÔÁ. äÌÑ ÔÏÇÏ, >< ÞÔÏÂÙ ÐÏÌÕÞÉÔØ ÐÏÔÏË ÓÏÂÙÔÉÊ × ÒÅÁÌØÎÏÍ ×ÒÅÍÅÎÉ ÉÓÐÏÌØÚÕÊÔÅ >--- >> <para>ðÏÔÏËÉ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ - ËÌÏÎÉÒÏ×ÁÎÎÙÅ ÐÓÅ×ÄÏ-ÕÓÔÒÏÊÓÔ×Á × >> ÆÁÊÌÏ×ÏÊ ÓÉÓÔÅÍÅ ÕÓÔÒÏÊÓÔ×, ÉÓÐÏÌØÚÕÑ ËÏÔÏÒÙÅ, ÐÒÉÌÏÖÅÎÉÑ ÍÏÇÕÔ >> ÐÏÌÕÞÁÔØ ÉÎÆÏÒÍÁÃÉÀ Ï ÓÉÓÔÅÍÎÙÈ ÓÏÂÙÔÉÑÈ × ÒÅÁÌØÎÏÍ ×ÒÅÍÅÎÉ. >> ÷ ÐÅÒ×ÕÀ ÏÞÅÒÅÄØ, ÜÔÏ ÄÏÌÖÎÏ ÚÁÉÎÔÅÒÅÓÏ×ÁÔØ Á×ÔÏÒÏ× ÐÒÏÇÒÁÍÍ >> ÄÌÑ ÍÏÎÉÔÏÒÉÎÇÁ É ÏÐÒÅÄÅÌÅÎÉÑ ×ÔÏÒÖÅÎÉÊ × ÓÉÓÔÅÍÕ. ôÅÍ ÎÅ >> ÍÅÎÅÅ, ÄÌÑ ÁÄÍÉÎÉÓÔÒÁÔÏÒÁ ÐÏÔÏËÉ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ ÍÏÇÕÔ ÓÔÁÔØ >> ÕÄÏÂÎÙÍ ÉÎÓÔÒÕÍÅÎÔÏÍ ÄÌÑ ÍÏÎÉÔÏÒÉÎÇÁ × ÒÅÁÌØÎÏÍ ×ÒÅÍÅÎÉ ÂÅÚ >> ÐÒÏÂÌÅÍ, Ó×ÚÑÁÎÎÙÈ Ó ÐÒÁ×ÁÍÉ ÆÁÊÌÁ ÁÕÄÉÔÁ, É ×ÏÚÍÏÖÎÏÓÔØÀ >> ÐÒÏÃÅÓÓÁ ÒÏÔÁÃÉÉ, ÞÔÏ ÐÒÉ×ÅÄÅÔ Ë ÏÂÒÙ×Õ ÐÏÔÏËÁ ÓÏÂÙÔÉÊ. >> äÌÑ ÔÏÇÏ, ÞÔÏÂÙ ÐÏÌÕÞÉÔØ ÐÏÔÏË ÓÏÂÙÔÉÊ × ÒÅÁÌØÎÏÍ ×ÒÅÍÅÎÉ ÉÓÐÏÌØÚÕÊÔÅ >660,661c696,697 >< <para>ðÏ ÕÍÏÌÞÁÎÉÀ, ÐÏÔÏËÉ ÄÏÓÔÕÐÎÙ ÔÏÌØËÏ ÐÏÌØÚÏ×ÁÔÅÌÀ <systemitem class="username">root</systemitem>. þÔÏÂÙ >< ÓÄÅÌÁÔØ ÉÈ ÄÏÓÔÕÐÎÙÍÉ ÞÌÅÎÁÍ ÇÒÕÐÐÙ <systemitem class="groupname">audit</systemitem> ÄÏÂÁרÔÅ >--- >> <para>ðÏ ÕÍÏÌÞÁÎÉÀ, ÐÏÔÏËÉ ÄÏÓÔÕÐÎÙ ÔÏÌØËÏ ÐÏÌØÚÏ×ÁÔÅÌÀ <systemitem class="username">root</systemitem>. >> þÔÏÂÙ ÓÄÅÌÁÔØ ÉÈ ÄÏÓÔÕÐÎÙÍÉ ÞÌÅÎÁÍ ÇÒÕÐÐÙ <systemitem class="groupname">audit</systemitem> ÄÏÂÁרÔÅ >667c703 >< <para>óÍÏÔÒÉÔÅ ÓÔÒÁÎÉÃÕ ÓÐÒÁ×ÏÞÎÉËÁ &man.devfs.rules.5; ÄÌÑ ÂÏÌÅÅ ÐÏÌÎÏÊ >--- >> <para>óÍÏÔÒÉÔÅ &man.devfs.rules.5; ÄÌÑ ÂÏÌÅÅ ÐÏÌÎÏÊ >673,677c709,716 >< ÓÅÔÅ×ÏÇÏ ××ÏÄÁ-×Ù×ÏÄÁ, É ËÏÍÁÎÄÁ <command>praudit</command> >< ÚÁÐÕÝÅÎÁ ×Ï ×ÒÅÍÑ SSH-ÓÅÓÓÉÉ, ÔÏ ÌÀÂÏÅ ÓÏÂÙÔÉÅ ÐÏÒÏÄÉÔ ×Ù×ÏÄ >< ÓÏÏÂÝÅÎÉÑ, ËÏÔÏÒÏÅ × Ó×ÏÀ ÏÞÅÒÅÄØ ÔÏÖÅ ÂÕÄÅÔ ÓÏÂÙÔÉÅÍ É ÔÁË ÄÏ >< ÂÅÓËÏÎÅÞÎÏÓÔÉ. òÁÚÕÍÎÅÅ ÂÕÄÅÔ ÎÅ ÚÁÐÕÓËÁÔØ <command>praudit</command> >< ÎÁ ÐÏÔÏËÅ ÓÏÂÙÔÉÊ ÉÚ ÓÅÓÓÉÉ, ËÏÔÏÒÁÑ ÄÅÔÁÌØÎÏ ÖÕÒÎÁÌÉÒÕÅÔÓÑ.</para> >--- >> ÓÅÔÅ×ÏÇÏ ××ÏÄÁ-×Ù×ÏÄÁ, É ËÏÍÁÎÄÁ &man.praudit.1; >> ÚÁÐÕÝÅÎÁ ×Ï ×ÒÅÍÑ SSH-ÓÅÓÓÉÉ, ÔÏ ÂÕÄÅÔ ÓÇÅÎÅÒÉÒÏ×ÁÎ >> ÐÏÓÔÏÑÎÎÙÊ ÐÏÔÏË ÓÏÏÂÝÅÎÉÊ ÁÕÄÉÔÁ, ÔÁË ËÁË ËÁÖÄÏÅ ÓÏÂÙÔÉÅ >> ×ÙÚÏ×ÅÔ ÅÝÅ ÏÎÄÏ ÓÏÂÙÔÉÅ, É ÔÁË ÄÏ ÂÅÓËÏÎÅÞÎÏÓÔÉ. >> òÁÚÕÍÎÅÅ ÂÕÄÅÔ ÚÁÐÕÓËÁÔØ &man.praudit.1; >> ÎÁ ÕÓÔÒÏÊÓÔ×Å ÐÏÔÏËÁ ÔÏÌØËÏ ÉÚ ÓÅÓÓÉÊ, × ËÏÔÏÒÙÈ >> ÎÅÔ ÂÏÌØÛÏÇÏ ÁÕÄÉÔÁ ××ÏÄÁ-×Ù×ÏÄÁ, ÞÔÏÂÙ ÉÚÂÅÖÁÔØ ÔÁËÏÇÏ >> ÐÏ×ÅÄÅÎÉÑ.</para> >685c724 >< ÁÕÄÉÔÁ <application>auditd</application>. áÄÍÉÎÉÓÔÒÁÔÏÒÙ ÎÅ ÄÏÌÖÎÙ ÐÙÔÁÔØÓÑ >--- >> ÁÕÄÉÔÁ &man.auditd.8;. áÄÍÉÎÉÓÔÒÁÔÏÒÙ ÎÅ ÄÏÌÖÎÙ ÐÙÔÁÔØÓÑ >689c728 >< ËÏÍÁÎÄÁ <command>audit</command>. óÌÅÄÕÀÝÁÑ ËÏÍÁÎÄÁ ÐÒÉ×ÅÄÅÔ Ë >--- >> ËÏÍÁÎÄÁ &man.audit.8;. óÌÅÄÕÀÝÁÑ ËÏÍÁÎÄÁ ÐÒÉ×ÅÄÅÔ Ë >692,693c731,732 >< ÓÁÍ ÆÁÊÌ - ÐÅÒÅÉÍÅÎÏ×ÁÎ. üÔÏ ÒÅËÏÍÅÎÄÏ×ÁÎÎÙÊ ÓÐÏÓÏ ÒÏÔÁÃÉÉ >< ÖÕÒÎÁÌØÎÙÈ ÆÁÊÌÏ×.</para> >--- >> ÓÁÍ ÆÁÊÌ - ÐÅÒÅÉÍÅÎÏ×ÁÎ, × ÒÅÚÕÌØÔÁÔÅ ÞÅÇÏ Ó ÎÉÍ ÍÏÖÎÏ ÂÕÄÅÔ >> ÒÁÂÏÔÁÔØ ÁÄÍÉÎÉÓÔÒÁÔÏÒÕ.</para> >698c737 >< <para>åÓÌÉ ÄÅÍÏÎ <application>auditd</application> ÎÅ ÚÁÐÕÝÅÎ, ÔÏ ÜÔÁ ËÏÍÁÎÄÁ >--- >> <para>åÓÌÉ &man.auditd.8; ÎÅ ÚÁÐÕÝÅÎ, ÔÏ ÜÔÁ ËÏÍÁÎÄÁ >711,714c750,753 >< <para>á×ÔÏÍÁÔÉÞÅÓËÁÑ ÒÏÔÁÃÉÑ ÖÕÒÎÁÌØÎÙÈ ÆÁÊÌÏ× ×ÏÚÍÏÖÎÁ ÐÒÉ ÉÓÐÏÌØÚÏ×ÁÎÉÉ >< ÏÐÃÉÉ <option>filesz</option> × ÆÁÊÌÅ >< &man.audit.control.5;, É ÏÐÉÓÁÎ × ÓÅËÃÉÉ >< "æÏÒÍÁÔ ËÏÎÆÉÇÕÒÁÃÉÏÎÎÏÇÏ ÆÁÊÌÁ".</para> >--- >> <para>á×ÔÏÍÁÔÉÞÅÓËÁÑ ÒÏÔÁÃÉÑ ÖÕÒÎÁÌØÎÙÈ ÆÁÊÌÏ× ÎÁ ÏÓÎÏ×ÁÎÉÉ >> ÉÈ ÒÁÚÍÅÒÁ ×ÏÚÍÏÖÎÁ ÐÒÉ ÉÓÐÏÌØÚÏ×ÁÎÉÉ ÏÐÃÉÉ <option>filesz</option> >> × ÆÁÊÌÅ &man.audit.control.5;, É ÏÐÉÓÁÎÁ × ÒÁÚÄÅÌÅ >> "æÏÒÍÁÔ ËÏÎÆÉÇÕÒÁÃÉÏÎÎÏÇÏ ÆÁÊÌÁ" ÄÁÎÎÏÊ ÇÌÁ×Ù.</para> >722,725c761,764 >< ÐÏÓÌÅ ÚÁËÒÙÔÉÑ ÉÈ ÄÅÍÏÎÏÍ <command>auditd</command>. äÌÑ ×ÙÐÏÌÎÅÎÉÑ >< ÏÐÒÅÄÅÌÅÎÎÙÈ ÐÏÌØÚÏ×ÁÔÅÌÅÍ ÄÅÊÓÔ×ÉÊ ÓÏÏÔ×ÅÔÓÔ×ÕÀÝÉÈ ÒÁÚÎÏÏÂÒÁÚÎÙÍ >< ÓÏÂÙÔÉÑÍ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ, ×ËÌÀÞÁÑ ÎÏÒÍÁÌØÎÏÅ ÚÁ×ÅÒÛÅÎÉÅ ÒÁÂÏÔÙ ÓÉÓÔÅÍÙ >< ÁÕÄÉÔÁ É ÆÉÌØÔÒÁÃÉÀ ÖÕÒÎÁÌØÎÙÈ ÆÁÊÌÏ×, ÍÏÖÅÔ ÂÙÔØ ÉÓÐÏÌØÚÏ×ÁÎ ÓËÒÉÐÔ >--- >> ÐÏÓÌÅ ÚÁËÒÙÔÉÑ ÉÈ ÄÅÍÏÎÏÍ ÁÕÄÉÔÁ. äÌÑ ×ÙÐÏÌÎÅÎÉÑ >> ÏÐÒÅÄÅÌÅÎÎÙÈ ÐÏÌØÚÏ×ÁÔÅÌÅÍ ÄÅÊÓÔ×ÉÊ, ÓÏÏÔ×ÅÔÓÔ×ÕÀÝÉÈ ÒÁÚÎÏÏÂÒÁÚÎÙÍ >> ÓÏÂÙÔÉÑÍ ÓÉÓÔÅÍÙ ÁÕÄÉÔÁ, ×ËÌÀÞÁÑ ÎÏÒÍÁÌØÎÏÅ ÚÁ×ÅÒÛÅÎÉÅ ÖÕÒÎÁÌÏ× >> ÁÕÄÉÔÁ ÐÒÉ ÉÈ ÒÏÔÁÃÉÉ, ÍÏÖÅÔ ÂÙÔØ ÉÓÐÏÌØÚÏ×ÁÎ ÓËÒÉÐÔ >737,743c776,781 >< <para>ðÒÉÍÅÒÁÍÉ ÄÒÕÇÉÈ ÄÅÊÓÔ×ÉÊ ÍÏÇÕÔ ÂÙÔØ, ÎÁÐÒÉÍÅÒ, ËÏÐÉÒÏ×ÁÎÉÅ ÆÁÊÌÏ× × ÍÅÓÔÏ ÉÈ >< ÐÏÓÌÅÄÕÀÝÅÇÏ ÈÒÁÎÅÎÉÑ, ÕÄÁÌÅÎÉÅ ÓÔÁÒÙÈ ÖÕÒÎÁÌØÎÙÈ ÆÁÊÌÏ×, ÆÉÌØÔÒÁÃÉÑ >< ÖÕÒÎÁÌØÎÙÈ ÆÁÊÌÏ× ÄÌÑ ÕÄÁÌÅÎÉÑ ÎÅÎÕÖÎÙÈ ÚÁÐÉÓÅÊ. óËÒÉÐÔ >< <filename>audit_warn</filename> ÂÕÄÅÔ ÚÁÐÕÝÅÎ ÔÏÌØËÏ ÔÏÌØËÏ ÐÒÉ >< ËÏÒÒÅËÔÎÏÍ ÚÁËÒÙÔÉÉ ÖÕÒÎÁÌÁ ÓÉÓÔÅÍÏÊ ÁÕÄÉÔÁ É ÎÅ ÚÁÐÕÓÔÉÔÓÑ >< ÄÌÑ ÖÕÒÎÁÌØÎÙÈ ÆÁÊÌÏ×, ÚÁÐÉÓØ × ËÏÔÏÒÙÅ ÂÙÌÁ ÐÒÅËÒÁÝÅÎÁ × >< ÒÅÚÕÌØÔÁÔÅ ÎÅËÏÒÒÅËÔÎÏÇÏ ÚÁ×ÅÒÛÅÎÉÑ.</para> >--- >> <para>ðÒÉÍÅÒÁÍÉ ÄÒÕÇÉÈ ÄÅÊÓÔ×ÉÊ ÍÏÇÕÔ ÂÙÔØ, ÎÁÐÒÉÍÅÒ, ËÏÐÉÒÏ×ÁÎÉÅ ÆÁÊÌÏ× >> ÁÕÄÉÔÁ ÎÁ ÃÅÎÔÒÁÌÉÚÏ×ÁÎÎÙÊ ÓÅÒ×ÅÒ, ÕÄÁÌÅÎÉÅ ÓÔÁÒÙÈ ÖÕÒÎÁÌØÎÙÈ ÆÁÊÌÏ×, >> ÆÉÌØÔÒÁÃÉÑ ÖÕÒÎÁÌØÎÙÈ ÆÁÊÌÏ× ÄÌÑ ÕÄÁÌÅÎÉÑ ÎÅÎÕÖÎÙÈ ÚÁÐÉÓÅÊ. óËÒÉÐÔ >> ÂÕÄÅÔ ÚÁÐÕÝÅÎ ÔÏÌØËÏ ÔÏÌØËÏ ÐÒÉ ËÏÒÒÅËÔÎÏÍ ÚÁËÒÙÔÉÉ ÖÕÒÎÁÌÁ ÓÉÓÔÅÍÏÊ >> ÁÕÄÉÔÁ É ÎÅ ÚÁÐÕÓÔÉÔÓÑ ÄÌÑ ÖÕÒÎÁÌØÎÙÈ ÆÁÊÌÏ×, ÚÁÐÉÓØ × ËÏÔÏÒÙÅ ÂÙÌÁ >> ÐÒÅËÒÁÝÅÎÁ × ÒÅÚÕÌØÔÁÔÅ ÎÅËÏÒÒÅËÔÎÏÇÏ ÚÁ×ÅÒÛÅÎÉÑ.</para>
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 187278
: 140628 |
140629