Changes

Jump to: navigation, search

Security/Mentorships/MWoS/2014/Linux Audit heka plugin (Go)

907 bytes added, 16:39, 9 September 2014
no edit summary
** Use sudo -s and then strace -f go run <filename>
* Study strace and ltrace documentation
 
=== 2014-09-08 ===
[https://etherpad.mozilla.org/YnR9hhqutn (Etherpad Index)]
 
[https://github.com/AALEKH/Audit-Go/ Project Code]
 
Current Work:
* Invalid Argument error removed :D, yay .
* Strace'd of auditd and netlink retrieved.
* Recieving nil as an output to audit message.
 
Discussion Point:
 
* Cause of nil error
* Way to parse audit message.
* Data type of audit message
 
Upcoming Work:
 
* Change the status code of proto, currently assigned 1000 status code is not correct.
* Output form of netlink message is structure.
* Use structure format same as audit_reply present in here [https://fedorahosted.org/audit/browser/trunk/lib/libaudit.h libaudit.h]
* Make a parse function like audit_get_reply as present in [https://fedorahosted.org/audit/browser/trunk/lib/libaudit.h libaudit.h]
* Study audit documentation and [https://fedorahosted.org/audit/browser/trunk/lib/libaudit.h libaudit.h] code
=== <date> ===
5
edits

Navigation menu