1#! /sbin/sh 2# 3# CDDL HEADER START 4# 5# The contents of this file are subject to the terms of the 6# Common Development and Distribution License (the "License"). 7# You may not use this file except in compliance with the License. 8# 9# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10# or http://www.opensolaris.org/os/licensing. 11# See the License for the specific language governing permissions 12# and limitations under the License. 13# 14# When distributing Covered Code, include this CDDL HEADER in each 15# file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16# If applicable, add the following below this CDDL HEADER, with the 17# fields enclosed by brackets "[]" replaced with your own identifying 18# information: Portions Copyright [yyyy] [name of copyright owner] 19# 20# CDDL HEADER END 21# 22# 23# Copyright 2006 Sun Microsystems, Inc. All rights reserved. 24# Use is subject to license terms. 25# 26# ident "%Z%%M% %I% %E% SMI" 27 28# if the audit state is "disabled" auditconfig returns 29# non-zero exit status unless the c2audit module is loaded; 30# if c2audit is loaded, "disabled" becomes "noaudit" early 31# in the boot cycle and "auditing" only after auditd starts. 32 33. /lib/svc/share/smf_include.sh 34 35AUDITCONFIG=/usr/sbin/auditconfig 36 37AUDITCOND=`$AUDITCONFIG -getcond 2> /dev/null` 38 39if [ $? -ne 0 ]; then 40 # The decision whether to start 41 # auditing is driven by bsmconv / bsmunconv 42 /usr/sbin/svcadm mark maintenance system/auditd 43 exit $SMF_EXIT_MON_OFFLINE; 44fi 45 46# In a non-global zone, auditd is started only if the "perzone" 47# audit policy has been set. 48if smf_is_nonglobalzone; then 49 echo `$AUDITCONFIG -getpolicy` | grep perzone > /dev/null 50 51 if [ $? -eq 1 ]; then 52 echo "$0: auditd is not configured to run in a local" 53 echo " zone, perzone policy not set (see auditconfig(1M))" 54 /usr/sbin/svcadm disable svc:/system/auditd:default 55 sleep 5 & 56 exit $SMF_EXIT_OK; 57 fi 58fi 59 60/etc/security/audit_startup 61# daemon forks, parent exits when child says it's ready 62exec /usr/sbin/auditd 63 64