Re: auditing subsystem

[Valdis . Kletnieks]

On Thu, 03 Mar 2005 22:18:11 PST, Russell Miller said:
> I've been doing a lot of research on this, and I keep coming up with things 

> I notice there is a CONFIG_AUDIT option.  Is this what I am looking for, and 
> how do I use it?  /dev/audit seems not to work...

oooh.. a victim^Wtester ;)

CONFIG_AUDIT is indeed what you're looking for, in combination with the audit-0.6.5
userspace end just released.  Mailing list is linux-audit@xxxxxxxxxx, visit
http://www.redhat.com/mailman/listinfo/linux-audit for more info....

(Currently, there's still a add-on kernel patch for stuff that's not in
the mainstream yet - but that's hopefully temporary.. ;)

Attachment: pgp00000.pgp
Description: PGP signature