PERFORCE change 179856 for review
Sergio Ligregni
ligregni at FreeBSD.org
Sat Jun 19 19:29:58 UTC 2010
http://p4web.freebsd.org/@@179856?ac=10
Change 179856 by ligregni at ligPhenom on 2010/06/19 19:29:14
Fixed formatting to better reading
Affected files ...
.. //depot/projects/soc2010/disaudit/ideas.txt#2 edit
Differences ...
==== //depot/projects/soc2010/disaudit/ideas.txt#2 (text+ko) ====
@@ -13,38 +13,38 @@
/* SLAVE */
disaudit_slave_level:0 # 0=disabled
- # 1=only when a trail closes (audit will call "shipd -l",
- # the last closed trail will be delivered without checkings)
- # 2=the daemon will perform a comparisson in the master system
- # reverse date sorted, when a trail is found ok in both systems,
- # then it will go backwards and sync the "newer" trails
- # 3=the daemon will ALWAYS perform a check of ALL trails found
- # in the slave system with the ones in the master system, this
- # option differs from 2 because, we can have an incorrect old
- # trail, and maybe the option 2 doesn't take care of that
- # because a newer trail is ok, this options are available
- # to let the admin tune the system and choose between performance
- # or trustiness (maybe the admin only needs the last slave's trail ok)
+ # 1=only when a trail closes (audit will call "shipd -l",
+ # the last closed trail will be delivered without checkings)
+ # 2=the daemon will perform a comparisson in the master system
+ # reverse date sorted, when a trail is found ok in both systems,
+ # then it will go backwards and sync the "newer" trails
+ # 3=the daemon will ALWAYS perform a check of ALL trails found
+ # in the slave system with the ones in the master system, this
+ # option differs from 2 because, we can have an incorrect old
+ # trail, and maybe the option 2 doesn't take care of that
+ # because a newer trail is ok, this options are available
+ # to let the admin tune the system and choose between performance
+ # or trustiness (maybe the admin only needs the last slave's trail ok)
disaudit_slave_msec:15000 # the frequency wich slave system will be doing the lists comparissons
- # and syncronizing both directories of trails
-disaudit_slave_mhost:masterHost # the master host (maybe we will allow IP address here)
+ # and syncronizing both directories of trails
+disaudit_slave_mhost:masterHost # the master host (maybe we will allow IP address here)
/* MASTER */
-disaudit_master_dir:/var/audit/other # the path to keep the audit trails received from slaves
-disaudit_master_dirperhost:yes # when receiving a trail, put it in a directory exclusive per
- # that host, this is, if "yes" selected:
- # /var/audit/other/
- # /var/audit/other/hostone/
- # /var/audit/other/hostone/20100618***.hostone.20100618<date_received>
- # /var/audit/other/hostone/20100619***.hostone.20100618<date_received>
- # /var/audit/other/otherhost/
- # /var/audit/other/otherhost/20100617***.otherhost.20100617<date_received>
- # /var/audit/other/otherhost/20100619***.otherhost.20100618<date_received>
- # if "no" selected:
- # /var/audit/other/
- # /var/audit/other/20100618***.hostone.20100618<date_received>
- # /var/audit/other/20100619***.hostone.20100618<date_received>
- # /var/audit/other/20100617***.otherhost.20100617<date_received>
- # /var/audit/other/20100619***.otherhost.20100619<date_received>
+disaudit_master_dir:/var/audit/other # the path to keep the audit trails received from slaves
+disaudit_master_dirperhost:yes # when receiving a trail, put it in a directory exclusive per
+ # that host, this is, if "yes" selected:
+ # /var/audit/other/
+ # /var/audit/other/hostone/
+ # /var/audit/other/hostone/20100618***.hostone.20100618<date_received>
+ # /var/audit/other/hostone/20100619***.hostone.20100618<date_received>
+ # /var/audit/other/otherhost/
+ # /var/audit/other/otherhost/20100617***.otherhost.20100617<date_received>
+ # /var/audit/other/otherhost/20100619***.otherhost.20100618<date_received>
+ # if "no" selected:
+ # /var/audit/other/
+ # /var/audit/other/20100618***.hostone.20100618<date_received>
+ # /var/audit/other/20100619***.hostone.20100618<date_received>
+ # /var/audit/other/20100617***.otherhost.20100617<date_received>
+ # /var/audit/other/20100619***.otherhost.20100619<date_received>
More information about the p4-projects
mailing list