BSM / audit_syslog ... how to get command line parameters in syslog?

Hi All!
I have been experimenting with Sun Basic Security Module (BSM) and was trying to send audit data via syslog to a central logging server like so:
# cat /etc/security/audit_startup
/usr/sbin/auditconfig -setpolicy +argv,arge
# cat /etc/security/audit_control
plugin: name=audit_syslog.so;p_flags=lo,ex,fr,fc,fd,fw,fmThis does produce the desired log output on the central logging server, except that the log lines do not contain command line parameters / environment variables:
2008-10-14T15:04:26-06:00 csadm4/csadm4 audit: [ID 702911 audit.notice] execve(2) ok session 1576737601 by rem_adm as root:root in csadm4 from csadm1-16.shell.ca obj /usr/bin/lessAs this makes it pretty useless for keeping proper audit records (there is a difference between
rm ~/file and
rm /file that I would like to see) I was wondering if there is a way to customize what is actually produced by audit_syslog.so?
Thanks in advance,
Rudolf

No, your plugin doesn't get any access to the command line.  Look for other methods of IAC (COM, DDE, shared memory, shared file, etc.)

Similar Messages

  • How to pass command line parameters in calling ant file

    Hi All, I m using a Build file which calls another build file.
    That build file is run from the command prompt by give ant -lib <path of jars it needs for executing>.
    Now i m calling this file from main build file but it does not work as i m not able to set <b>-lib </b>.
    Pls can anybody let me know how to set such command line parameters to call the build file in ant script.
    Thanks in Advance.
    Ketan.B.Parekh

    Create the control file dynamically (and fill one of the columns with the file name as a constant) before you start SQL*Loader
    Another option is to use external tables
    Re: Data Loading
    Message was edited by:
    Jens Petersen

  • Slim fails to login...how to get command line back?

    Man, what a drag.  I (seemingly) successfully installed Arch with xfce, which is a huge accomplishment for a guy coming from years of Ubuntu, and avoiding command line and config files every chance he gets.
    Anyway, I'm using slim as a display manager, and it fails to login (I am choosing the xfce session).  I can't seem to get to a command line so that I can try a different display manager.  Google says that Ctrl-Alt-F1 should do the trick, but that just gives me a black screen and sits there.  Any help?
    Thanks.

    Pacopag wrote:I'm not sure how to even edit the grub file.
    Like this http://www.cyberciti.biz/faq/grub-boot- … user-mode/
    Does Alt-Ctrl-F2 work?
    Last edited by karol (2011-05-29 03:39:49)

  • How to get COMMAND LINE input

    I am writng an application to add numbers inputted by the user at the command line in a DOS session in the java application. How do i read in input from the user?
    any help is much appreciated

    import java.io.*;
    public class ReadUser {
          static String userInput;
          static int sum = 0;
       public static void main(String[] args) {
          BufferedReader buff = new BufferedReader(new InputStreamReader (System.in));
          // get a string 4 times
          for (int i=0; i<4; i++) {
              System.out.println("Enter a Number");
              try
                   userInput = buff.readLine();
              catch(Exception ex)
                   System.err.println("Had a problem getting input");
                       // convert the string to an int and total it
              sum = sum + Integer.parseInt(userInput);
          // print the sum
         System.out.println("The total is " + sum);
             System.exit(0);

  • How to pass command line parameters During server start up

    Hi,
      I am trying to use Net Beans profiling tool.On the server side i required to pass a command line option to enable remote profiling.
    Regards,
    Kiran.

    Hi, MB.
    If you are talking about the automatic Java Web Start support for launching app clients in GlassFish, you can pass the equivalent of command line arguments using the query string of the URL you use to launch the app client.
    Briefly, use
    http://host:port/client-path?arg=first-arg&arg=second-arg& ...
    specifying the argument values in the order that you want them passed to the client.
    The GlassFish server will do the right thing and generates the correct JNLP so your arguments are passed to the app client.
    The GlassFish developer's guide http://glassfish.dev.java.net/nonav/javaee5/docs/AS91DG.pdf discusses this and all aspects of the Java Web Start support. You can also take a look at this blog entry http://blogs.sun.com/quinn/entry/command_line_arguments_and_properties that focuses on how to pass arguments.
    Since this technique deals with argument passing in the URL, it works no matter how you launch the app client: a URL in a browser, the javaws command, etc.
    - Tim

  • Ant: how to get command-line argument?

    When using Ant to build Java source files, what is the syntax of obtaining command-line argument in build.xml?

    From the documentation:
    http://ant.apache.org/manual/running.html#libs
    Examples
    ant
    runs Ant using the build.xml file in the current directory, on the default target.
    ant -buildfile test.xml
    runs Ant using the test.xml file in the current directory, on the default target.
    ant -buildfile test.xml dist
    runs Ant using the test.xml file in the current directory, on the target called dist.
    ant -buildfile test.xml -Dbuild=build/classes dist
    runs Ant using the test.xml file in the current directory, on the target called dist, setting the build property to the value build/classes.
    ant -lib /home/ant/extras
    runs Ant picking up additional task and support jars from the /home/ant/extras location
    steps:
    - You define a property (like ${my.prop}) in your build.xml
    - You define it in the command line, like
    ant -Dmy.prop=chosen_value compile
    where "compile" is the target and "-Dmy.prop=chosen_value" defines the value of the property "my.prop" as "chosen_value".

  • Getting command line parameters

    Hi there,
    I developed an application that reads args from the command line.
    Problem is that when I read a windows path like this:
    <DIR>\<DIR>\
    the last backslash is skipped... (from args[0])
    why?
    Thanks in advance,
    Davide

    ok, I'll try it.
    At his moment, I solved using this:
    "C:\Program Files\\"
    so I guess is something about escape sequences.
    In fact, in the above path I'm using \\ to specify the "\" character.
    But is stil a strange behaviour.
    In "C:Program Files\" It seems JVM is using the last
    "\" as an escape sequence but in a path like this
    "C:\Develop\" (without spaces) it recognizes correctly
    the last backslash.
    Bye,
    Davide

  • How to get ALL command line parameters

    Hi,
    Is there possibility to get all command line parameters which
    Flex builder invokes when I press RUN button ?
    I am asking because I want to create mxmlc ant task with the
    same parameters as Flex builder.
    I wrote something like that below but I have a problem with
    invoking remote function, it seems that poduced SWF inf flex
    builder an my script (below) arent the same - and mayby have some
    security differences.
    Any Ideas how to get all compiler argumets from flex builder
    quote:
    <mxmlc
    file="${flex.src}\main.mxml"
    output="${flex.output}\main.swf"
    services="${path.tomcat.root.WEB}/flex/services-config.xml"
    context-root="${path.tomcat.root}"
    use-network="true"
    keep-generated-actionscript="false"
    debug="false"
    locale="en_US"
    incremental="true"
    >
    <!--load-externs="${LOADEXTERNS}"
    link-report="link-report.xml" -->
    <load-config
    filename="${FLEX_HOME}\frameworks\flex-config.xml"/>
    <source-path path-element="${FLEX_HOME}\frameworks"/>
    <compiler.source-path path-element="${flex.src}"/>
    <compiler.library-path dir="${FLEX_HOME}\frameworks"
    append="true">
    <include name="libs" />
    <include name="../bundles/{locale}" />
    </compiler.library-path>
    </mxmlc>

    Hi,
    Try -dump-config compiler argument, which will write all the
    currently set configuration values. Please find more details at the
    URL below.
    http://www.quilix.com/node/9
    Hope this helps.

  • Command Line Parameters Nightmare!

    My issue--and it seems to only be my issue--is with the Command Line Parameters. I have been trying to install iTunes 5.0 for five days now. I have tried everything posted in these forums. Dmitry, thanks for such a great resource; it helped some, but not with this one problem, unfortunately.
    Anyway, everytime I open the iTunes installer I get a message about command line parameters. It gives me a list of a bunch of parameters that I know nothing about. If you would like to see a screen shot of this travesty, you can go to this link: http://staff.fcps.net/nfish/specialdownloadspage.htm.
    Anyone know how to fix this problem or know an alternative solution? Thanks.

    I solved my problem...Everyone who has this problem needs to go see Tim's incredible solution at Nathanael Fish, "new error......" #13, 09:55am Sep 23, 2005 CDT
    It will fix this problem, guaranteed.
    Nate

  • Command line parameters for OMBPlus?

    Hi,
    Is it possible to pass command line parameters to TCL scripts running in OMBPlus.sh, and if so, can someone provide an example?
    I'm able to use the argv0 variable to get the script name itself but not sure how to get any other additional parms...
    Thanks,
    Jim

    Jim,
    If you are building command-line scripts to automate OMB+ commands, there is another factor you should be aware of. If your script errors out cleanly, the OMBPlus.sh does NOT pass this back to the shell. The return code is evaluated within OMBPlus as the return from a "source" command and then OMBPlus exits normally.
    For example:
    #file test.tcl
    return -code error
    Unix/shell> OMBPlus.sh test.tcl
    Unix/shell> echo $?
    0What I do to pass an error state back to the shell is to create a flag file in my script if exiting due to error. My shell script deletes this file prior to running the script and then tests for it after the run as part of the conditional logic
    Function in tcl file:
    #Get location where this script installed
    #This variable is set at the top of the script.
    set theScriptDir  [ file dirname [info script]]
    #If we want to bail in the script at any point we call exit_failure with an appropriate error message
    proc exit_failure { msg } {
       global theScriptDir 
       set ERRFLAGFILE "$theScriptDir/ers_owb_import.error"
    #rollback any uncommitted work
       OMBROLLBACK
    #Log the error and exit
       set fout [open "$ERRFLAGFILE" a+]     
       puts $fout "Error:-> $msg"
       close $fout
       # return and also bail from calling function
       return -code error
    }And my shell script does something like:
    cd ${JOB_DIR}
    rm -f ers_owb_import.error 2>/dev/null
    echo \\nBegining Uninstall of OWB Project
    ./OMBPlus.sh ${JOB_DIR}/my_tcl_Script.tcl
    if [ -f ${JOB_DIR}/ers_owb_import.error ] ; then
          echo \\nERROR - SCRIPT FAILED
    else
         echo \\nScript Succeeded.
         # script logic continues....
    fiCheers,
    Mike

  • Edit command line parameters without restarting LabVIEW

    Is there a way to edit the command line parameters passed to a VI WITHOUT having to restart LabVIEW?  Perhaps I'm accustomed to how it works in just about every other development environment, but having to do so is quite frustrating.
    Solved!
    Go to Solution.

    ronbrown wrote:
    I'm just surprised that LabVIEW doesn't have just a simple "command line parameters" option somewhere in the VI options for debugging purposes, just like Visual Studio and other deveopment environments.
    If memory serves, Visual Studio runs the compiled program as a separate process. That should make it easier to give it separate switches. In LabVIEW, if you let the user change the parameters, you would have to do some conflict resolution, since this is a global setting (e.g. did the changes you make affect everything or a single VI/hierarchy/app instance, are the original switches lost or can you get them back somehow and when).
    If you want a workaround, I suggest you create a simple subVI with a 1D array output and a 1D array control on its FP or BD. If the control has something in it, use it. Otherwise, use the CLA[] property. Alternatively, you can check if you're running in the IDE or use a boolean, etc. Personally, the only time I think I needed to use switches, I believe the code was simple and I simply tested it by building the EXE. It probably took longer to figure out that I needed to explicitly turn on CLA support for the EXE than the actual testing.
    Try to take over the world!

  • Retrieving command line parameters

    How I can retrieve the command line parameters generated by following JSP?
    <HTML>
    <Head>
    <Title> Reading command line parameters </title>
    </head>
    <Body>
    <P><H1> Press here to try the test command line string</H1></P>
    </body>
    </html>
    Zulfi

    hi,
    ur url should have a name/value pair
    something like this
    thread.jsp?forum=45&thread=279067
    and then get these values from request object.
    vasanth

  • InstallShield command line parameters when launching install

    Hi,
    I am attempting to install Ver 5.0.1.4 (same error occurs with ver 4.x)and after the .exe unpackages, I get the following error: InstallShield - command line parameters... etc etc..
    I have attempted to uninstall all Apple apps and reinstall. The iPod Updater reinstalls without error, iTunes always returns the above error. I have performed the following steps:
    1. msiexec /regserver - reboot
    2. uninstalling and reinstalling Windows Installer 3.1 KB893803v2
    3. clearing the %temp% dir
    4. deleting the Program Files/Common Files/InstallShield/Engine contents
    5. rebooting, cursing and taking numerous mental 'time-outs'
    I'm running XP SP2 w/ all updates. Zonealarm FW - disabled, McAfee Virusscan - disabled, and no active anti-spy software.
    I've scoured the forums for help on this issue and can't find any. Google also hasn't been much help.
    Does anyone know how to get past this error?
    Cheers

    Jakub,
    I've seen people complain about this problem a time or two, but it's very rare. I'm told that you can work around this problem by downloading the winrar application and opening that to uncompress the iTunesSetup.exe file.
    http://www.download.com/3000-2250-10007677.html

  • Can't install trial version--command line parameters

    I'm considering buying Lightroom and have downloaded the trial version, but I can't install it.  I get the following<br />Command Line Parameters:<br /><br />/L language ID<br />/S Hide initialization dialog. For silent mode use: /S/v/qn<br />/V parameters to MSIExec.ese<br />/UA<url to InstMsiA.exe><br />/UW<url to InstMsiW.exe><br />/UM<url to msi package><br /><br />Please help.  I don't know what this means<br /><br />thanks

    Hi Cherie,
    Here's how you do it.
    1. Start the installation from the downloaded file or the CD.
    2. You will have a folder Lightroom 2.0.
    3. In that folder go to the Adobe Photoshop Lightroom 2 folder.
    4. Right click on "setup32.exe" and drag it to release it anywhere in the empty space.
    5. You will get 3 options.
    6. Choose the "Create Shortcut here" option.
    7. Once the shortcut is created, right-click on the shortcut and choose properties.
    8. In the target area, which might look some thing like this "C:\Documents and Settings\admin\Desktop\Adobe\Lightroom 2.0\Adobe Photoshop Lightroom 2\setup32.exe" go to the end of the line and add "/s" without the quotes.
    9. The same line would look <"C:\Documents and Settings\admin\Desktop\Adobe\Lightroom 2.0\Adobe Photoshop Lightroom 2\setup32.exe" /s>
    10. Click on Apply and then on OK.
    11. Double -click on the shortcut and the program will install.
    12. Try it! Thought the steps appear lengthy, they worked on the 3 PCs that I tried on. :)
    Regards,
    Abhijit

  • Command line parameters and resuming

    Hi,
    I am researching for a client who wishes to have several students (K-12) using Adobe Captivate course on the same computer. Another constraint is that a course is run from DVD (1+ GB in size) so it's published as standalone application (.exe for Windows, .app for Mac). Quick questions:
    Can a course have an action to parse command line parameters? I haven't found that.
    Explanation: this would be used to simply parse a name and e-mail address (if possible) and last module passed to a course player. Resuming could be disabled (there is an answer how to do that in the forum) or overridden but the learner should be transferred to a slide to resume based on the calling parameter (and not the default resuming - there will be several users so each must resume from the last passed module slide).
    Can a progress of the current learner using the course be saved to a database (no LMS, e-mail, Acrobat.com etc)?
    Explanation: this is needed for the current learner and for each one separately. I guess I already have a solution in mind (custom application, having small internal web server like Mongoose, with a script that replaces internalServerReporting.php and saves the data to a internal database, SQLite). But for this to work spawning a course with command line parameters and course itself reading these parameters would need to work.
    If there is a (better) solution for the above, please reply. The goal is have minimal changes on the course e.g. if there are command line parameters, then parse them and do something (mark modules passed, open appropriate next slide). If parameters are not given/recognized, do nothing (so the course would still work on computers used by one learner only, including resuming etc).
    My opinion is that this should also be one-way as much as possible. E.g. additional application handles user name, e-mail and current progress and spawns Captivate course. The published course itself should not depend on the application like reading progress from a text file (though an URL call could return current progress from an application for the same user name). So ideally only changes to use internal server publishing to save current progress and adding a logic to check parameters at start would be applied to a course.
    Waiting for your smart answers.
    Matt

    DVDs, when finalized, are read-only... so unless you are considering to do an Install of the course from the DVD to the machine, you're not going to be able to write to a database.  A USB stick may be more suitable in this situation.
    Command line params are not possible with EXEs unless you create your own EXE wrapper.  If you're going to go through that trouble, you'd be better off creating an Adobe Air application that can run your local web content without security restrictions and use SQLite or some other backend to store the data.
    Can the progress be saved?  It depends what you mean by progress.  If you just want to allow the student to resume from the slide where they left off... you can do that with a bit of JavaScript.  However, if you want to ensure that any previous questions answered on a quiz were also resumed and intact from the previous session... not possible without an LMS.
    Why not run a Moodle installation via a USB stick and you can have a full featured LMS with a database and ability to resume a previous session?
    http://docs.moodle.org/19/en/Installation_guide_-_Moodle_for_Windows_on_a_USB_Memory_Stick
    Just some things to consider...

Maybe you are looking for