Re: [audit] Upstream solution for auditing file system objects

From: Paul Rolland
Date: Fri Dec 10 2004 - 08:02:32 EST


You could also have a look at LIDS. Though the target is not the same,
some useful idea may be gathered there...


Paul Rolland, rol(at)
ex-AS2917 Network administrator and Peering Coordinator


Please no HTML, I'm not a browser - Pas d'HTML, je ne suis pas un navigateur

"Some people dream of success... while others wake up and work hard at it"

> -----Message d'origine-----
> De : linux-kernel-owner@xxxxxxxxxxxxxxx
> [mailto:linux-kernel-owner@xxxxxxxxxxxxxxx] De la part de
> Timothy Chavez
> Envoyé : vendredi 10 décembre 2004 01:03
> À : linux-kernel@xxxxxxxxxxxxxxx
> Cc : serue@xxxxxxxxxxxxxxxxxxxxxxx; sds@xxxxxxxxxxxxxx;
> rml@xxxxxxxxxx; ttb@xxxxxxxxxxxxxxxx
> Objet : [audit] Upstream solution for auditing file system objects
> Greetings,
> I'm writing this e-mail to facilitate some discussion on an audit
> feature for inclusion to the mainline kernel's audit subsysystem.
> I've written out a "brief" description of the problem with some of the
> associated problems it introduces and some of the outlines of
> potential solutions below. For the most part, the idea stays the
> same, and the mechanism we use to implement it varies.

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at
Please read the FAQ at