autolog.conf

[pyllyukko]

No description provided.

[pyllyukko]

Can't seem to get autolog working:

user: pi         pts/1      1
now:  1615411693 = Wed Mar 10 23:28:13 2021
No match for process

[pyllyukko]

Autolog uses utmp which is probably not used by all programs anymore due to logind. At least SSH seems to still update it. We need to gather a list of various software and whether they still write entries to utmp or not.

[pyllyukko]

Supplementary groups (such as users) can't be used (see JKDingwall/autolog#1) as Autolog functions as follows:

• Get struct passwd from username
• Get struct group with passwd->pw_gid (primary group)
• Check against autolog.conf

This kinda limits the usefulness of Autolog, but maybe we could still specify e.g. all sessions in tty[0-9]+.

[pyllyukko]

It also needs to be tested whether this would break some graphical environments. With Debian & Gnome you have the following:

$ loginctl 
SESSION  UID USER SEAT  TTY
      4 1000 XYZ  seat0 tty2

1 sessions listed.

$ w
 10:55:11 up 3 days,  2:46,  2 users,  load average: 1.31, 1.26, 1.23
USER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU WHAT
XYZ      tty2     tty2             Mon08    2days  0.09s  0.09s /usr/libexec/gnome-session-binary --systemd