summaryrefslogtreecommitdiff
path: root/shell.c
diff options
context:
space:
mode:
authorStephen Hemminger <stephen.hemminger@vyatta.com>2010-06-17 10:05:01 -0700
committerStephen Hemminger <stephen.hemminger@vyatta.com>2010-06-17 10:05:01 -0700
commit770e38401ae5489d58d7dd1f45cf27813d100d5e (patch)
treede009ba16331d4ce60ce540ad0bc3a34be1912b8 /shell.c
parent17e6dd57b0b329888f64491a0bfdd0c9793dd216 (diff)
downloadvyatta-bash-770e38401ae5489d58d7dd1f45cf27813d100d5e.tar.gz
vyatta-bash-770e38401ae5489d58d7dd1f45cf27813d100d5e.zip
Remove AUDIT_SHELL option
The concept of logging shell commands through audit subsystem is not useful because it is too hard to configure, requires special privledges, doesn't handle background commands, and is missing the necessary information...
Diffstat (limited to 'shell.c')
-rw-r--r--shell.c30
1 files changed, 0 insertions, 30 deletions
diff --git a/shell.c b/shell.c
index 9836035..1aac510 100644
--- a/shell.c
+++ b/shell.c
@@ -236,9 +236,6 @@ struct {
#if defined (RESTRICTED_SHELL)
{ "restricted", Int, &restricted, (char **)0x0 },
#endif
-#if defined (AUDIT_SHELL)
- { "audit", Int, &audited, (char **)0x0 },
-#endif
{ "verbose", Int, &echo_input_at_read, (char **)0x0 },
{ "version", Int, &do_version, (char **)0x0 },
{ "wordexp", Int, &wordexp_only, (char **)0x0 },
@@ -637,10 +634,6 @@ main (argc, argv, env)
maybe_make_restricted (shell_name);
#endif /* RESTRICTED_SHELL */
-#if defined (AUDIT_SHELL)
- maybe_make_audited (shell_name);
-#endif
-
if (wordexp_only)
{
startup_state = 3;
@@ -1140,29 +1133,6 @@ maybe_make_restricted (name)
}
#endif /* RESTRICTED_SHELL */
-#if defined (AUDIT_SHELL)
-/* Perhaps make this shell an `audited' one, based on NAME. If the
- basename of NAME is "vbash", then this shell is audited. The
- name of the audited shell is a configurable option, see config.h.
- In an audited shell, all actions performed by root will be logged
- to the audit system.
- Do this also if `audited' is already set to 1 maybe the shell was
- started with --audit. */
-int
-maybe_make_audited (name)
- char *name;
-{
- char *temp;
-
- temp = base_pathname (name);
- if (*temp == '-')
- temp++;
- if (audited || (STREQ (temp, AUDIT_SHELL_NAME)))
- audited = 1;
- return (audited);
-}
-#endif /* AUDIT_SHELL */
-
/* Fetch the current set of uids and gids and return 1 if we're running
setuid or setgid. */
static int