summaryrefslogtreecommitdiffstats
path: root/seaudit/seaudit-report.conf
diff options
context:
space:
mode:
Diffstat (limited to 'seaudit/seaudit-report.conf')
-rw-r--r--seaudit/seaudit-report.conf62
1 files changed, 62 insertions, 0 deletions
diff --git a/seaudit/seaudit-report.conf b/seaudit/seaudit-report.conf
new file mode 100644
index 0000000..fb36c24
--- /dev/null
+++ b/seaudit/seaudit-report.conf
@@ -0,0 +1,62 @@
+<?xml version="1.0" ?>
+<!-- comment
+ seaudit-report.conf
+
+ This conf file is used to configure information presented in
+ reports generated by the seaudit-report tool.
+
+ The XML-based configuration file is laid out as follows:
+ Report Configuration
+ Standard Section Definitions
+ Custom Section Definitions
+ SEAudit View Definitions
+
+ The STANDARD SECTION definitions define a set of predefined tags
+ that the tool will look for when creating the report. The tool
+ will consider each of these tags as a standard section for the
+ report. To exclude a standard section within the report, simply
+ remove the appropriate standard-section tag. The predefined
+ standard-section tags may use any of the following identifiers:
+
+ 'Statistics': displays general statistics for the log.
+ 'PolicyLoads': displays all load policy messages.
+ 'EnforcementToggles': displays all enforcement toggle messages.
+ 'PolicyBooleans': displays all policy boolean messages.
+ 'AllowListing': displays all allow messages.
+ 'DenyListing': displays all denied messages.
+
+ All of the above predefined tags require the attribute 'id' to
+ be specified or an error will be returned. The 'title' attribute
+ is optional.
+
+ The CUSTOM SECTION definitions are used to create customized
+ sections within the report through the use of saved seaudit
+ view files. SEAudit views files can be created using the seaudit
+ GUI tool or by manually creating the file(s) with the correct
+ format. View tags should be provided as children within the
+ custom-section tag and a valid pathname is required for the
+ tags' 'file' attribute. An example of a custom-section tag can
+ be:
+ <custom-section title="Critical Errors">
+ <view file="/home/sec_admin/seaudit-report/views/critical.vw">
+ </view>
+ </custom-section>
+
+ The 'title' attribute is optional for the custom-section tag.
+
+ NOTE: The tool will display the reports' sections in the order
+ in which the tags are defined within the config file. So for
+ instance, inserting the custom-section tag to be the first defined
+ tag within the config file, will display the custom-section results
+ before all other results in the report. See the default settings
+ below for further information.
+-->
+
+<seaudit-report title="SEAudit Log Report">
+ <standard-section id ="Statistics" title="Log Statistics"></standard-section>
+ <standard-section id ="PolicyLoads" title="Policy Loads"></standard-section>
+ <standard-section id ="EnforcementToggles" title="Enforcement mode toggles"></standard-section>
+ <standard-section id ="PolicyBooleans" title="Policy boolean changes"></standard-section>
+ <standard-section id ="AllowListing" title="Allow Listing"></standard-section>
+ <standard-section id ="DenyListing" title="Deny Listing"></standard-section>
+</seaudit-report>