From: dtucker <dtucker>
Date: Sun, 17 Sep 2006 12:55:52 +0000 (+0000)
Subject:  - (dtucker) [INSTALL] Add info about audit support.
X-Git-Tag: V_4_4_P1~13
X-Git-Url: http://andersk.mit.edu/gitweb/openssh.git/commitdiff_plain/8e700494bba0574f0164c4ed27b2bd1220493162

 - (dtucker) [INSTALL] Add info about audit support.
---

diff --git a/ChangeLog b/ChangeLog
index 73601772..2973498f 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -12,6 +12,7 @@
  - (dtucker) [monitor.c] Correctly handle auditing of single commands when
    using Protocol 1.  From jhb at freebsd.
  - (djm) [sshd.c] Fix warning/API abuse; ok dtucker@
+ - (dtucker) [INSTALL] Add info about audit support.
 
 20060912
  - (djm) [Makefile.in buildpkg.sh.in configure.ac openssh.xml.in]
diff --git a/INSTALL b/INSTALL
index 6dde6b77..73b4cc5c 100644
--- a/INSTALL
+++ b/INSTALL
@@ -75,6 +75,12 @@ the automatically generated files by running "autoreconf".
 
 http://www.gnu.org/software/autoconf/
 
+Basic Security Module (BSM):
+
+Native BSM support is know to exist in Solaris from at least 2.5.1,
+FreeBSD 6.1 and OS X.  Alternatively, you may use the OpenBSM
+implementation (http://www.openbsm.org).
+
 
 2. Building / Installation
 --------------------------
@@ -125,6 +131,10 @@ name).
 
 There are a few other options to the configure script:
 
+--with-audit=[module] enable additional auditing via the specified module.
+Currently, drivers for "debug" (additional info via syslog) and "bsm"
+(Sun's Basic Security Module) are supported.
+
 --with-pam enables PAM support. If PAM support is compiled in, it must
 also be enabled in sshd_config (refer to the UsePAM directive).