1#! /sbin/sh 2# 3# CDDL HEADER START 4# 5# The contents of this file are subject to the terms of the 6# Common Development and Distribution License, Version 1.0 only 7# (the "License"). You may not use this file except in compliance 8# with the License. 9# 10# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 11# or http://www.opensolaris.org/os/licensing. 12# See the License for the specific language governing permissions 13# and limitations under the License. 14# 15# When distributing Covered Code, include this CDDL HEADER in each 16# file and include the License file at usr/src/OPENSOLARIS.LICENSE. 17# If applicable, add the following below this CDDL HEADER, with the 18# fields enclosed by brackets "[]" replaced with your own identifying 19# information: Portions Copyright [yyyy] [name of copyright owner] 20# 21# CDDL HEADER END 22# 23# 24# Copyright 2005 Sun Microsystems, Inc. All rights reserved. 25# Use is subject to license terms. 26# 27# ident "%Z%%M% %I% %E% SMI" 28 29# if the audit state is "disabled" auditconfig returns 30# non-zero exit status unless the c2audit module is loaded; 31# if c2audit is loaded, "disabled" becomes "noaudit" early 32# in the boot cycle and "auditing" only after auditd starts. 33 34. /lib/svc/share/smf_include.sh 35 36AUDITCONFIG=/usr/sbin/auditconfig 37ZONE=`/sbin/zonename` 38 39AUDITCOND=`$AUDITCONFIG -getcond 2> /dev/null` 40 41if [ $? -ne 0 ]; then 42 # The decision whether to start 43 # auditing is driven by bsmconv / bsmunconv 44 /usr/sbin/svcadm mark maintenance system/auditd 45 exit $SMF_EXIT_MON_OFFLINE; 46fi 47 48# In a non-global zone, auditd is started only if the "perzone" 49# audit policy has been set. 50if [ "$ZONE" != "global" ]; then 51 echo `$AUDITCONFIG -getpolicy` | grep perzone > /dev/null 52 53 if [ $? -eq 1 ]; then 54 echo "$0: auditd is not configured to run in a local zone" 55 exit $SMF_EXIT_ERR_CONFIG; 56 fi 57fi 58 59/etc/security/audit_startup 60# daemon forks, parent exits when child says it's ready 61exec /usr/sbin/auditd 62 63