607408 – net-misc/openssh: add USE=audit support

Bug 607408 - net-misc/openssh: add USE=audit support

Summary: net-misc/openssh: add USE=audit support

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal enhancement
Assignee:	Gentoo's Team for Core System packages

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2017-01-27 17:07 UTC by Mark H. Wood
Modified:	2017-02-10 01:51 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
emerge --info output (emerge-info.out,4.89 KB, text/plain) 2017-01-27 17:07 UTC, Mark H. Wood	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Mark H. Wood 2017-01-27 17:07:32 UTC

Created attachment 461616 [details]
emerge --info output

OpenSSH is not sending AUDIT_USER_LOGIN records when users log in.  The package isn't sensitive to USE=audit and apparently does not set --enable-audit=linux for any other reason.  While there may be other ways to deduce that someone logged in via SSH, this fragmentation of audit information causes misleading output from aureport.

Comment 1 SpanKY gentoo-dev

2017-02-10 01:51:22 UTC

should be supported in the 7.4_p1:
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e7693d34d59e51dc7fb767c9d06a2cbe75680586