Bug 6155 - it should be easier to audit thinlinc activities
Summary: it should be easier to audit thinlinc activities
Status: NEW
Alias: None
Product: ThinLinc
Classification: Unclassified
Component: VSM Server (show other bugs)
Version: 1.3.1
Hardware: PC Unknown
: P2 Normal
Target Milestone: LowPrio
Assignee: Henrik Andersson
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-01-31 17:10 CET by Pierre Ossman
Modified: 2023-01-25 14:37 CET (History)
1 user (show)

See Also:
Acceptance Criteria:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Pierre Ossman cendio 2017-01-31 17:10:49 CET 
(spawned off bug 97)

There may be a need for better tools to perform auditing of how users are interacting with ThinLinc. Currently this information is only find in text form in log files.

One example of an improvement would be better integration with libauditd where we would add things such as when sessions are created or when they are shadowed.
Comment 1 Henrik Andersson cendio 2017-02-01 08:45:56 CET 
(In reply to comment #0)
> (spawned off bug 97)
> 
> There may be a need for better tools to perform auditing of how users are
> interacting with ThinLinc. Currently this information is only find in text form
> in log files.
> 
> One example of an improvement would be better integration with libauditd where
> we would add things such as when sessions are created or when they are
> shadowed.

and ship a set of auditd rules specific for components in ThinLinc. Also if auditd is used we need to complete our se linux profile for better logging meta data.
Comment 2 Henrik Andersson cendio 2017-02-01 08:45:56 CET 
(In reply to comment #0)
> (spawned off bug 97)
> 
> There may be a need for better tools to perform auditing of how users are
> interacting with ThinLinc. Currently this information is only find in text form
> in log files.
> 
> One example of an improvement would be better integration with libauditd where
> we would add things such as when sessions are created or when they are
> shadowed.

and ship a set of auditd rules specific for components in ThinLinc. Also if auditd is used we need to complete our se linux profile for better logging meta data.
Comment 3 Pierre Ossman cendio 2018-10-02 12:48:10 CEST 
Some prototype code exists on bug 97.
Note You need to log in before you can comment on or make changes to this bug.