1*7c478bd9Sstevel@tonic-gate#! /sbin/sh 2*7c478bd9Sstevel@tonic-gate# 3*7c478bd9Sstevel@tonic-gate# CDDL HEADER START 4*7c478bd9Sstevel@tonic-gate# 5*7c478bd9Sstevel@tonic-gate# The contents of this file are subject to the terms of the 6*7c478bd9Sstevel@tonic-gate# Common Development and Distribution License, Version 1.0 only 7*7c478bd9Sstevel@tonic-gate# (the "License"). You may not use this file except in compliance 8*7c478bd9Sstevel@tonic-gate# with the License. 9*7c478bd9Sstevel@tonic-gate# 10*7c478bd9Sstevel@tonic-gate# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 11*7c478bd9Sstevel@tonic-gate# or http://www.opensolaris.org/os/licensing. 12*7c478bd9Sstevel@tonic-gate# See the License for the specific language governing permissions 13*7c478bd9Sstevel@tonic-gate# and limitations under the License. 14*7c478bd9Sstevel@tonic-gate# 15*7c478bd9Sstevel@tonic-gate# When distributing Covered Code, include this CDDL HEADER in each 16*7c478bd9Sstevel@tonic-gate# file and include the License file at usr/src/OPENSOLARIS.LICENSE. 17*7c478bd9Sstevel@tonic-gate# If applicable, add the following below this CDDL HEADER, with the 18*7c478bd9Sstevel@tonic-gate# fields enclosed by brackets "[]" replaced with your own identifying 19*7c478bd9Sstevel@tonic-gate# information: Portions Copyright [yyyy] [name of copyright owner] 20*7c478bd9Sstevel@tonic-gate# 21*7c478bd9Sstevel@tonic-gate# CDDL HEADER END 22*7c478bd9Sstevel@tonic-gate# 23*7c478bd9Sstevel@tonic-gate# 24*7c478bd9Sstevel@tonic-gate# Copyright 2005 Sun Microsystems, Inc. All rights reserved. 25*7c478bd9Sstevel@tonic-gate# Use is subject to license terms. 26*7c478bd9Sstevel@tonic-gate# 27*7c478bd9Sstevel@tonic-gate# ident "%Z%%M% %I% %E% SMI" 28*7c478bd9Sstevel@tonic-gate 29*7c478bd9Sstevel@tonic-gate# if the audit state is "disabled" auditconfig returns 30*7c478bd9Sstevel@tonic-gate# non-zero exit status unless the c2audit module is loaded; 31*7c478bd9Sstevel@tonic-gate# if c2audit is loaded, "disabled" becomes "noaudit" early 32*7c478bd9Sstevel@tonic-gate# in the boot cycle and "auditing" only after auditd starts. 33*7c478bd9Sstevel@tonic-gate 34*7c478bd9Sstevel@tonic-gate. /lib/svc/share/smf_include.sh 35*7c478bd9Sstevel@tonic-gate 36*7c478bd9Sstevel@tonic-gateAUDITCONFIG=/usr/sbin/auditconfig 37*7c478bd9Sstevel@tonic-gateZONE=`/sbin/zonename` 38*7c478bd9Sstevel@tonic-gate 39*7c478bd9Sstevel@tonic-gateAUDITCOND=`$AUDITCONFIG -getcond 2> /dev/null` 40*7c478bd9Sstevel@tonic-gate 41*7c478bd9Sstevel@tonic-gateif [ $? -ne 0 ]; then 42*7c478bd9Sstevel@tonic-gate # The decision whether to start 43*7c478bd9Sstevel@tonic-gate # auditing is driven by bsmconv / bsmunconv 44*7c478bd9Sstevel@tonic-gate /usr/sbin/svcadm mark maintenance system/auditd 45*7c478bd9Sstevel@tonic-gate exit $SMF_EXIT_MON_OFFLINE; 46*7c478bd9Sstevel@tonic-gatefi 47*7c478bd9Sstevel@tonic-gate 48*7c478bd9Sstevel@tonic-gate# In a non-global zone, auditd is started only if the "perzone" 49*7c478bd9Sstevel@tonic-gate# audit policy has been set. 50*7c478bd9Sstevel@tonic-gateif [ "$ZONE" != "global" ]; then 51*7c478bd9Sstevel@tonic-gate echo `$AUDITCONFIG -getpolicy` | grep perzone > /dev/null 52*7c478bd9Sstevel@tonic-gate 53*7c478bd9Sstevel@tonic-gate if [ $? -eq 1 ]; then 54*7c478bd9Sstevel@tonic-gate echo "$0: auditd is not configured to run in a local zone" 55*7c478bd9Sstevel@tonic-gate exit $SMF_EXIT_ERR_CONFIG; 56*7c478bd9Sstevel@tonic-gate fi 57*7c478bd9Sstevel@tonic-gatefi 58*7c478bd9Sstevel@tonic-gate 59*7c478bd9Sstevel@tonic-gate/etc/security/audit_startup 60*7c478bd9Sstevel@tonic-gate# daemon forks, parent exits when child says it's ready 61*7c478bd9Sstevel@tonic-gateexec /usr/sbin/auditd 62*7c478bd9Sstevel@tonic-gate 63