summaryrefslogtreecommitdiff
path: root/shell.c
AgeCommit message (Collapse)Author
2010-10-11Update to bash-4.1Stephen Hemminger
2010-06-18Shell command logging supportStephen Hemminger
Log command exit to message queue for use by command logging daemons.
2010-06-17Remove AUDIT_SHELL optionStephen Hemminger
The concept of logging shell commands through audit subsystem is not useful because it is too hard to configure, requires special privledges, doesn't handle background commands, and is missing the necessary information...
2010-04-09Integrate bash 3.2 versionStephen Hemminger
This is merge of current Debian stable (Lenny) version of Bash with Vyatta changes.
2010-04-09Auditing is on for vbashStephen Hemminger
Rather than using original patch which did auditing for shell named aubash, we use it for vbash.
2010-04-05Add auditing support to bashStephen Hemminger
This is based on earlier (unaccepted) patch to add auditing support which wasd done by Steve Grubb at Redhat. This patch depends on audit 1.4 to provide a logging function. The resulting audit message looks like this: time->Tue Jan 30 18:23:45 2007 type=USER_CMD msg=audit(1170199425.793:143): user pid=22862 uid=0 auid=0 subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd=2F726F6F742F7465737420646972 cmd=6C73202D6C (terminal=tty1 res=success)' Which translates to: type=USER_CMD msg=audit(01/30/2007 18:23:45.793:143) : user pid=22862 uid=root auid=root subj=system_u:system_r:unconfined_t:s0-s0:c0.c1023 msg='cwd=/root/test dir cmd=ls -l (terminal=tty1 res=success)' This patch causes bash to log all command line arguments when the shell is started as aubash or "bash --audit". The preferred methos is to make a symlink frp, bash to aubash and then add aubash to /etc/shells. Then you can change root's shell to aubash.
2007-12-07support external per-level policies controlling default restricted modeAn-Cheng Huang
and allowed op/cfg/pipe commands, i.e., no more hard-coded policies in bash.
2007-12-04set default restricted mode based on group (in "vyattacfg" => "output",An-Cheng Huang
otherwise => "full").
2007-11-14patched with "debian_patches" in bash_3.1dfsg-8.diff.gzAn-Cheng Huang
2007-11-12initial import from bash_3.1dfsg.orig.tar.gzAn-Cheng Huang