Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 424653 - sys-process/audit needs gssapi USE flag
Summary: sys-process/audit needs gssapi USE flag
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Robin Johnson
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-07-03 21:23 UTC by Tully Gray
Modified: 2017-02-10 01:50 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
audit-2.1.3-r1.ebuild gssapi patch (audit.patch,339 bytes, patch)
2013-05-15 20:06 UTC, Tully Gray 		Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Tully Gray 2012-07-03 21:23:55 UTC 
I set up centralized auditing and then went to configure Kerberos authentication but sys-process/audit needs the "gssapi" use flag.  Please allow users to apply "--enable-gssapi-krb5" via the "gssapi" or "kerberos" use flags.

Reproducible: Always

Steps to Reproduce:
emerge sys-process/audit
Actual Results:  
Everything appears to be working, but I saw this message in my logs "audisp-remote: GSSAPI support is not enabled".  Checked /sbin/auditd with ldd and I can't see any Kerberos/GSSAPI libraries linked.

Expected Results:  
The audisp-remote plugin should have aborted the connection because I configured the Kerberos settings incorrectly (I think so anyway).  It basically just ignored the settings, if audit had been built against the Kerberos/GSSAPI libraries I suspect it would have aborted the connection.

I have a working Kerberos infrastructure and have been using audit for a few years.  I've never tried centralized auditing with Kerberos auth before though.
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2012-12-22 07:20:03 UTC 
patches welcome, I know nothing of krb, and I don't have a test environment for it.
Comment 2 Tully Gray 2013-05-15 20:06:33 UTC 
Created attachment 348428 [details, diff]
audit-2.1.3-r1.ebuild gssapi patch

Adds "gssapi" USE flag to audit ebuild.
Comment 3 Tully Gray 2013-05-15 20:08:14 UTC 
Sorry to take so long replying to this, unfortunately I no longer have a working krb setup since the loss of the system with my KDC.  I modified the audit ebuild to include the "gssapi" USE flag, here is a patch.  This has been tested and if I remember correctly, everything worked fine.  Patch is attached.