Bug 6155

Summary:	it should be easier to audit thinlinc activities
Product:	ThinLinc	Reporter:	Pierre Ossman <ossman>
Component:	VSM Server	Assignee:	Henrik Andersson <hean01>
Status:	NEW ---
Severity:	Normal	CC:	ossman
Priority:	P2
Version:	1.3.1
Target Milestone:	LowPrio
Hardware:	PC
OS:	Unknown
See Also:	https://www.cendio.com/bugzilla/show_bug.cgi?id=5452 https://bugzilla.cendio.com/show_bug.cgi?id=5092
Acceptance Criteria:

Description Pierre Ossman cendio

2017-01-31 17:10:49 CET

(spawned off bug 97)

There may be a need for better tools to perform auditing of how users are interacting with ThinLinc. Currently this information is only find in text form in log files.

One example of an improvement would be better integration with libauditd where we would add things such as when sessions are created or when they are shadowed.

Comment 1 Henrik Andersson cendio

2017-02-01 08:45:56 CET

(In reply to comment #0)
> (spawned off bug 97)
> 
> There may be a need for better tools to perform auditing of how users are
> interacting with ThinLinc. Currently this information is only find in text form
> in log files.
> 
> One example of an improvement would be better integration with libauditd where
> we would add things such as when sessions are created or when they are
> shadowed.

and ship a set of auditd rules specific for components in ThinLinc. Also if auditd is used we need to complete our se linux profile for better logging meta data.

Comment 2 Henrik Andersson cendio

2017-02-01 08:45:56 CET

(In reply to comment #0)
> (spawned off bug 97)
> 
> There may be a need for better tools to perform auditing of how users are
> interacting with ThinLinc. Currently this information is only find in text form
> in log files.
> 
> One example of an improvement would be better integration with libauditd where
> we would add things such as when sessions are created or when they are
> shadowed.

and ship a set of auditd rules specific for components in ThinLinc. Also if auditd is used we need to complete our se linux profile for better logging meta data.

Comment 3 Pierre Ossman cendio

2018-10-02 12:48:10 CEST

Some prototype code exists on bug 97.