New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add man pages for rpm2archive and various plugins #1021
Conversation
doc/rpm-plugin-audit.8
Outdated
|
||
It can be disabled permanantly by commenting out the | ||
\fI%__transaction_audit\fR macro in main macros file | ||
(typically located at \fI/usr/lib/rpm/macros\fR) or otherwise change |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Couple of things that go for all the plugin manuals:
Editing the main macros file is not good advice as that's supposed to represent the factory configuration and any subsequent updates will overwrite the changes. The right way to disable these is to redefine the macro to %{nil} in a /etc/rpm/macros.* file. It could also mention --noplugins as a means to temporarily disable all plugins.
As for audit, while we're actually documenting this stuff (whee!), lets also document how to actually find the events:
ausearch -m SOFTWARE_UPDATE
and if we really get wild, the attatched properties.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Added a separate rpm-plugins man page that explains all this to avoid copying the same block all over again and again.
rpm-plugin-audit is now a bit more helpful but can probably still be extended.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Oh, if you want to elaborate on the actual messages, here are brief descriptions of the fields:
Field | Possible values | Description |
---|---|---|
op | install/update/remove | package operation |
sw | <software label> | name-version-release.arch of the package |
key_enforce | 0/1 | are signatures being enforced |
gpg_res | 0/1 | result of signature check (0 == fail / 1 == success) |
root_dir | <root directory path> | Root directory of the operation, normally "/" |
sw_type | rpm | package format |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ok, formatting this was as complicated as I expected...
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Oh, I didn't really mean putting that table literally in the manual, just presenting it here in that format seemed to make sense.
Oh and BTW, I don't see any benefit from adding these in separate commits. Might just as well merge all into one big "add manuals for xxx, yyy..." commit. |
I kept the changes to the plugin man pages as a separate patch to make them easier to review. Will squash them before them getting merged. |
Other than those 1-2 items, looks good to me now. |
* rpm-plugins for plugins in general * selinux plugin * syslog plugin * audit plugin * prioreset plugin * ima plugin
Okay, works for me. |
Le jeu. 30 janv. 2020 à 16:23, Panu Matilainen <notifications@github.com> a
écrit :
Merged #1021 <#1021>
into master.
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
<#1021?email_source=notifications&email_token=ADLPZUY5K2OZ6U7GO2BEB53RALWINA5CNFSM4KNAMH32YY3PNVWWK3TUL52HS4DFWZEXG43VMVCXMZLOORHG65DJMZUWGYLUNFXW5KTDN5WW2ZLOORPWSZGOWJYT7BQ#event-2993766278>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ADLPZU33VJRHZBSHETWMVLLRALWINANCNFSM4KNAMH3Q>
.
_______________________________________________
Rpm-maint mailing list
***@***.***
http://lists.rpm.org/mailman/listinfo/rpm-maint
rpm-plugins.8 never was created and thus all those new man pages refer to a
non existing man page…
|
No description provided.