- (dtucker) [INSTALL] Add info about audit support.

diff --git a/ChangeLog b/ChangeLog
index 736017720ff18ca07f64bf0a35f465522193690c..2973498fc6683196b9f13685e70fd1376e8bc94e 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -12,6 +12,7 @@
  - (dtucker) [monitor.c] Correctly handle auditing of single commands when
    using Protocol 1.  From jhb at freebsd.
  - (djm) [sshd.c] Fix warning/API abuse; ok dtucker@
+ - (dtucker) [INSTALL] Add info about audit support.
 
 20060912
  - (djm) [Makefile.in buildpkg.sh.in configure.ac openssh.xml.in]

diff --git a/INSTALL b/INSTALL
index 6dde6b77a7c2c98797e27bc9528d96d09faa6034..73b4cc5c02b9c84cc9c493825dc30d84c6548978 100644 (file)
--- a/INSTALL
+++ b/INSTALL
@@ -75,6 +75,12 @@ the automatically generated files by running "autoreconf".
 
 http://www.gnu.org/software/autoconf/
 
+Basic Security Module (BSM):
+
+Native BSM support is know to exist in Solaris from at least 2.5.1,
+FreeBSD 6.1 and OS X.  Alternatively, you may use the OpenBSM
+implementation (http://www.openbsm.org).
+
 
 2. Building / Installation
 --------------------------
@@ -125,6 +131,10 @@ name).
 
 There are a few other options to the configure script:
 
+--with-audit=[module] enable additional auditing via the specified module.
+Currently, drivers for "debug" (additional info via syslog) and "bsm"
+(Sun's Basic Security Module) are supported.
+
 --with-pam enables PAM support. If PAM support is compiled in, it must
 also be enabled in sshd_config (refer to the UsePAM directive).