summaryrefslogtreecommitdiff
path: root/shell.c
diff options
context:
space:
mode:
authorStephen Hemminger <stephen.hemminger@vyatta.com>2010-06-17 10:05:01 -0700
committerStephen Hemminger <stephen.hemminger@vyatta.com>2010-06-17 10:14:48 -0700
commit6d5107b8266f06e6fdf6daf2ffc8191dbe171466 (patch)
treefd6833daf73acbab4dfd0e1d106099d33946d522 /shell.c
parent17e6dd57b0b329888f64491a0bfdd0c9793dd216 (diff)
downloadvyatta-bash-6d5107b8266f06e6fdf6daf2ffc8191dbe171466.tar.gz
vyatta-bash-6d5107b8266f06e6fdf6daf2ffc8191dbe171466.zip
Remove AUDIT_SHELL option
The concept of logging shell commands through audit subsystem is not useful because it is too hard to configure, requires special privledges, doesn't handle background commands, and is missing the necessary information...
Diffstat (limited to 'shell.c')
-rw-r--r--shell.c30
1 files changed, 0 insertions, 30 deletions
diff --git a/shell.c b/shell.c
index 9836035..1aac510 100644
--- a/shell.c
+++ b/shell.c
@@ -236,9 +236,6 @@ struct {
#if defined (RESTRICTED_SHELL)
{ "restricted", Int, &restricted, (char **)0x0 },
#endif
-#if defined (AUDIT_SHELL)
- { "audit", Int, &audited, (char **)0x0 },
-#endif
{ "verbose", Int, &echo_input_at_read, (char **)0x0 },
{ "version", Int, &do_version, (char **)0x0 },
{ "wordexp", Int, &wordexp_only, (char **)0x0 },
@@ -637,10 +634,6 @@ main (argc, argv, env)
maybe_make_restricted (shell_name);
#endif /* RESTRICTED_SHELL */
-#if defined (AUDIT_SHELL)
- maybe_make_audited (shell_name);
-#endif
-
if (wordexp_only)
{
startup_state = 3;
@@ -1140,29 +1133,6 @@ maybe_make_restricted (name)
}
#endif /* RESTRICTED_SHELL */
-#if defined (AUDIT_SHELL)
-/* Perhaps make this shell an `audited' one, based on NAME. If the
- basename of NAME is "vbash", then this shell is audited. The
- name of the audited shell is a configurable option, see config.h.
- In an audited shell, all actions performed by root will be logged
- to the audit system.
- Do this also if `audited' is already set to 1 maybe the shell was
- started with --audit. */
-int
-maybe_make_audited (name)
- char *name;
-{
- char *temp;
-
- temp = base_pathname (name);
- if (*temp == '-')
- temp++;
- if (audited || (STREQ (temp, AUDIT_SHELL_NAME)))
- audited = 1;
- return (audited);
-}
-#endif /* AUDIT_SHELL */
-
/* Fetch the current set of uids and gids and return 1 if we're running
setuid or setgid. */
static int