1 files changed, 153 insertions, 0 deletions

diff --git a/recipes-security/audit/audit/auditd b/recipes-security/audit/audit/auditd
new file mode 100755
index 0000000..fcd96c9
--- /dev/null
+++ b/recipes-security/audit/audit/auditd
@@ -0,0 +1,153 @@
+#! /bin/sh
+### BEGIN INIT INFO
+# Provides:          auditd
+# Required-Start:    $local_fs
+# Required-Stop:     $local_fs
+# Default-Start:     2 3 4 5
+# Default-Stop:      0 1 6
+# Short-Description: Audit Daemon
+# Description:       Collects audit information from Linux 2.6 Kernels.
+### END INIT INFO
+
+# Author: Philipp Matthias Hahn <pmhahn@debian.org>
+# Based on Debians /etc/init.d/skeleton and Auditds init.d/auditd.init
+
+# June, 2012: Adopted for yocto <amy.fong@windriver.com>
+
+# PATH should only include /usr/* if it runs after the mountnfs.sh script
+PATH=/sbin:/bin:/usr/sbin:/usr/bin
+DESC="audit daemon"
+NAME=auditd
+DAEMON=/sbin/auditd
+PIDFILE=/var/run/"$NAME".pid
+SCRIPTNAME=/etc/init.d/"$NAME"
+
+# Exit if the package is not installed
+[ -x "$DAEMON" ] || exit 0
+
+# Read configuration variable file if it is present
+[ -r /etc/default/"$NAME" ] && . /etc/default/"$NAME"
+
+. /etc/default/rcS
+
+. /etc/init.d/functions                                                
+
+#
+# Function that starts the daemon/service
+#
+do_start()
+{
+        # Return
+        #   0 if daemon has been started
+        #   1 if daemon was already running
+        #   2 if daemon could not be started
+        start-stop-daemon -S --quiet --pidfile "$PIDFILE" --exec "$DAEMON" --test > /dev/null \
+                || return 1
+        start-stop-daemon -S --quiet --pidfile "$PIDFILE" --exec "$DAEMON" -- \
+                $EXTRAOPTIONS \
+                || return 2
+        if [ -f /etc/audit/audit.rules ]
+        then
+                /sbin/auditctl -R /etc/audit/audit.rules >/dev/null
+        fi
+}
+
+#
+# Function that stops the daemon/service
+#
+do_stop()
+{
+        # Return
+        #   0 if daemon has been stopped
+        #   1 if daemon was already stopped
+        #   2 if daemon could not be stopped
+        #   other if a failure occurred
+        start-stop-daemon -K --quiet --pidfile "$PIDFILE" --name "$NAME"
+        RETVAL="$?"
+        [ "$RETVAL" = 2 ] && return 2
+        # Many daemons don't delete their pidfiles when they exit.
+        rm -f "$PIDFILE"
+        rm -f /var/run/audit_events
+        # Remove watches so shutdown works cleanly
+        case "$AUDITD_CLEAN_STOP" in
+                no|NO) ;;
+                *) /sbin/auditctl -D >/dev/null ;;
+        esac
+        return "$RETVAL"
+}
+
+#
+# Function that sends a SIGHUP to the daemon/service
+#
+do_reload() {
+        start-stop-daemon -K --signal HUP --quiet --pidfile $PIDFILE --name $NAME
+        return 0
+}
+
+if [ ! -e /var/log/audit ]; then
+        mkdir -p /var/log/audit
+        [ -x /sbin/restorecon ] && /sbin/restorecon -F /var/log/audit
+fi
+
+case "$1" in
+  start)
+        [ "$VERBOSE" != no ] && echo "Starting $DESC" "$NAME"
+        do_start
+        case "$?" in
+                0|1) [ "$VERBOSE" != no ] && echo 0 ;;
+                2) [ "$VERBOSE" != no ] && echo 1 ;;
+        esac
+        ;;
+  stop)
+        [ "$VERBOSE" != no ] && echo "Stopping $DESC" "$NAME"
+        do_stop
+        case "$?" in
+                0|1) [ "$VERBOSE" != no ] && echo 0 ;;
+                2) [ "$VERBOSE" != no ] && echo 1 ;;
+        esac
+        ;;
+  reload|force-reload)
+        echo "Reloading $DESC" "$NAME"
+        do_reload
+        echo $?
+        ;;
+  restart)
+        echo "Restarting $DESC" "$NAME"
+        do_stop
+        case "$?" in
+          0|1)
+                do_start
+                case "$?" in
+                        0) echo 0 ;;
+                        1) echo 1 ;; # Old process is still running
+                        *) echo 1 ;; # Failed to start
+                esac
+                ;;
+          *)
+                # Failed to stop
+                echo 1
+                ;;
+        esac
+        ;;
+  rotate)
+        echo "Rotating $DESC logs" "$NAME"
+        start-stop-daemon -K --signal USR1 --quiet --pidfile "$PIDFILE" --name "$NAME"
+        echo $?
+        ;;
+  status)
+        pidofproc "$DAEMON" >/dev/null
+        status=$?
+        if [ $status -eq 0 ]; then
+                echo "$NAME is running."
+        else
+                echo "$NAME is not running."
+        fi
+        exit $status
+        ;;
+  *)
+        echo "Usage: $SCRIPTNAME {start|stop|restart|reload|force-reload|rotate|status}" >&2
+        exit 3
+        ;;
+esac
+
+: