| 1 |
OpenBSM TODO |
| 2 |
|
| 3 |
- Build a regression test suite for libbsm that generates each token |
| 4 |
type and then compares the results with known good data. Make sure to |
| 5 |
test that things work properly with respect to endianness of the local |
| 6 |
platform. |
| 7 |
- Document contents of libbsm "public" data structures in libbsm man pages. |
| 8 |
- The audit.log.5 man page is incomplete, as it does not describe all |
| 9 |
token types. |
| 10 |
- It might be desirable to be able to provide EOPNOTSUPP system call stubs |
| 11 |
on systems that don't have the necessary audit system calls; that would |
| 12 |
allow the full libbsm and tool set to build, just not run. |
| 13 |
- Teach praudit how to begin printing at any point in a token stream, not |
| 14 |
just at the beginning of a record. This will make it easier to use |
| 15 |
praudit in test suites processing single-token files without header and |
| 16 |
trailer context. |
| 17 |
- Document audit_warn event arguments. |
| 18 |
- Allow the path /etc/security to be configured at configure-time so that |
| 19 |
alternative locations can be used. |
| 20 |
- NLS support for au_strerror(3), which provides error strings for BSM errors |
| 21 |
not available on the local OS platform. |
| 22 |
- Support for client certificates in auditdistd, to include certificate chain |
| 23 |
validation. |
