Re: logging access attempts denied

Blair, Don (Space Technology) wrote:
> For security purposes, I have a need to log access to files that were denied.  Is it possible to get that information using dazuko?  Or does the code have to be modified to get that information?  Any suggested patches?

Hi,

Applications registered with Dazuko receive the UID of the process 
trying to open the file and the name of the file. Using this information 
it would be possible for your registered application to determine if the 
user would be able to open the file.

There is no direct event from Dazuko generated for failed open's. Under 
Linux 2.4 Dazuko could be pretty easily modified to generate 
"ON_OPEN_FAILED" events. Under Linux 2.6 this would not be possible 
because Dazuko uses the LSM framework for Linux 2.6. A new DazukoFS is 
in the works that would make this possible under Linux 2.6, but that is 
still about 5 months away (and has other issues).

But as I said at the beginning, this could theoretically be determined 
from your registered application and not require modifications of Dazuko.

John Ogness

-- 
Dazuko Maintainer