Skip to main content

MacOS OpenBSM library

Project description

OpenBSM-Python

Binding OpenBSM library for MacOS using Python

Install

clone this project and use pip3

pip3 install openbsm

Features

  • Read /var/audit/files like a praudit

    sudo python3 -m bsm.bin.praudit /dev/auditpipe

    or after install

    sudo pyaudit /dev/auditpipe

    Output example:

    header,173,11,ioctl(2),0,Thu Nov 21 18:05:36 2019, + 253 msec
    argument,2,0x40084106,cmd
    argument,3,0x7ffee20df4a0,arg
    path,/dev/auditpipe
    argument,1,0x4,fd
    attribute,8576,0,0,1202303120,320,184549377
    subject,jhchoi,root,wheel,root,wheel,81615(/Library/Frameworks/Python.framework/Versions/3.7/Resources/Python.app/Contents/MacOS/Python),100007,50331650,0.0.0.0
    return,success,0
    identity,0,,complete,,complete,0x
    trailer,173
    header,173,11,ioctl(2),0,Thu Nov 21 18:05:36 2019, + 253 msec
    argument,2,0x40044105,cmd
    argument,3,0x7ffee20df4a0,arg
    path,/dev/auditpipe
    argument,1,0x4,fd
    attribute,8576,0,0,1202303120,320,184549377
    subject,jhchoi,root,wheel,root,wheel,81615(/Library/Frameworks/Python.framework/Versions/3.7/Resources/Python.app/Contents/MacOS/Python),100007,50331650,0.0.0.0
    return,success,0
    

TODO

  • Argtype classes
  • Filter options for monitoring

Project details


Release history Release notifications

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for openbsm, version 0.0.1
Filename, size File type Python version Upload date Hashes
Filename, size openbsm-0.0.1-py3-none-any.whl (28.3 kB) File type Wheel Python version py3 Upload date Hashes View hashes
Filename, size openbsm-0.0.1.tar.gz (21.5 kB) File type Source Python version None Upload date Hashes View hashes

Supported by

Elastic Elastic Search Pingdom Pingdom Monitoring Google Google BigQuery Sentry Sentry Error logging AWS AWS Cloud computing DataDog DataDog Monitoring Fastly Fastly CDN SignalFx SignalFx Supporter DigiCert DigiCert EV certificate StatusPage StatusPage Status page