xref: /illumos-gate/usr/src/cmd/auditd/auditd.xml (revision 16f0fd39d0c84c014919d701f87f5fc48be58d31)
1<?xml version="1.0"?>
2<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
3<!--
4 Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
5 Use is subject to license terms.
6
7 CDDL HEADER START
8
9 The contents of this file are subject to the terms of the
10 Common Development and Distribution License (the "License").
11 You may not use this file except in compliance with the License.
12
13 You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
14 or http://www.opensolaris.org/os/licensing.
15 See the License for the specific language governing permissions
16 and limitations under the License.
17
18 When distributing Covered Code, include this CDDL HEADER in each
19 file and include the License file at usr/src/OPENSOLARIS.LICENSE.
20 If applicable, add the following below this CDDL HEADER, with the
21 fields enclosed by brackets "[]" replaced with your own identifying
22 information: Portions Copyright [yyyy] [name of copyright owner]
23
24 CDDL HEADER END
25
26    NOTE:  This service manifest is not editable; its contents will
27    be overwritten by package or patch operations, including
28    operating system upgrade.  Make customizations in a different
29    file.
30-->
31
32<service_bundle type='manifest' name='SUNWcsr:auditd'>
33
34<service
35	name='system/auditd'
36	type='service'
37	version='1'>
38
39	<single_instance />
40
41	<dependency
42		name='usr'
43		type='service'
44		grouping='require_all'
45		restart_on='none'>
46		<service_fmri value='svc:/system/filesystem/local' />
47	</dependency>
48
49	<dependency
50		name='ns'
51		type='service'
52		grouping='require_all'
53		restart_on='none'>
54		<service_fmri value='svc:/milestone/name-services' />
55	</dependency>
56
57	<dependency
58		name='syslog'
59		type='service'
60		grouping='optional_all'
61		restart_on='none'>
62		<service_fmri value='svc:/system/system-log' />
63	</dependency>
64
65	<dependent
66		name='auditd_multi-user'
67		grouping='optional_all'
68		restart_on='none'>
69		<service_fmri value='svc:/milestone/multi-user'/>
70	</dependent>
71
72	<dependent
73		name='console-login'
74		grouping='optional_all'
75		restart_on='none'>
76		<service_fmri value='svc:/system/console-login'/>
77	</dependent>
78
79	<exec_method
80		type='method'
81		name='start'
82		exec='/lib/svc/method/svc-auditd'
83		timeout_seconds='15'>
84		<method_context>
85			<method_credential user='root' group='root' />
86		</method_context>
87	</exec_method>
88
89	<exec_method
90		type='method'
91		name='refresh'
92		exec=':kill -HUP'
93		timeout_seconds='30'>
94		<method_context>
95			<method_credential user='root' group='root' />
96		</method_context>
97	</exec_method>
98
99	<!--
100		auditd waits for c2audit to quiet down after catching a
101		-TERM before exiting; auditd's timeout is 20 seconds
102	-->
103
104	<exec_method
105		type='method'
106		name='stop'
107		exec=':kill -TERM'
108		timeout_seconds='30'>
109		<method_context>
110			<method_credential user='root' group='root' />
111		</method_context>
112	</exec_method>
113
114	<!-- SIGs HUP, TERM, and USR1 are all expected by auditd -->
115
116	<property_group name='startd' type='framework'>
117		<propval name='ignore_error' type='astring'
118		value='core,signal' />
119	</property_group>
120
121	<property_group name='general' type='framework'>
122		<!-- to start stop auditd -->
123		<propval name='action_authorization' type='astring'
124			value='solaris.audit.config' />
125		<propval name='value_authorization' type='astring'
126			value='solaris.audit.config' />
127	</property_group>
128
129	<instance name='default' enabled='false' />
130
131	<stability value='Evolving' />
132
133	<template>
134		<common_name>
135			<loctext xml:lang='C'>
136				Solaris audit daemon
137			</loctext>
138		</common_name>
139		<documentation>
140			<manpage title='auditd'
141				section='1M'
142				manpath='/usr/share/man'/>
143			<manpage title='audit'
144				section='1M'
145				manpath='/usr/share/man'/>
146	         </documentation>
147	</template>
148
149</service>
150
151</service_bundle>
152