@@ -23,7 +23,7 @@ The design documents can be found from the following links:
2323``` console
2424$ git clone --depth=1 -b wip/usdt https://gitlab.com/gnutls/gnutls.git
2525$ ./bootstrap
26- $ ./configure --prefix=/path/to/installation
26+ $ ./configure --prefix=/path/to/installation --enable-crypto-auditing
2727$ make -j$( nproc)
2828$ sudo make install
2929```
@@ -40,16 +40,6 @@ $ make
4040$ sudo make install
4141```
4242
43- The first step requires ` agent/src/bpf/vmlinux.h ` to be populated. By
44- default it is done through BTF dump from the running kernel with
45- ` bpftool ` , but if it is not supported in your system, it is possible
46- to use ` vmlinux.h ` included in the ` kernel-devel ` package:
47-
48- ``` console
49- $ sudo dnf install kernel-devel
50- $ cp $( rpm -ql kernel-devel | grep ' /vmlinux.h$' | tail -1) agent/src/bpf
51- ```
52-
5343## Running
5444
55451 . Create dedicated user and group (e.g., crypto-auditing: crypto-auditing )
@@ -73,16 +63,14 @@ SocketMode=0660
7363library = [" /path/to/installation/lib64/libgnutls.so.30" ]
7464user = " crypto-auditing:crypto-auditing"
7565```
76- 5 . Enable agent and event-broker
66+ 5 . Enable agent
7767``` console
7868$ sudo systemctl daemon-reload
7969$ sudo systemctl start crau-agent.service
80- $ sudo systemctl start crau-event-broker.socket
8170```
82- 6 . Connect to event-broker with client
71+ 6 . Run monitor
8372``` console
84- $ crau-client --scope tls --format json
85- $ crau-client --scope tls --format cbor --output audit.cborseq
73+ $ crau-monitor
8674```
87757 . On another terminal, run any commands using the instrumented library
8876``` console
0 commit comments