atom feed6 messages in org.freebsd.trustedbsd-auditRe: Rough plans for OpenBSM 1.1
FromSent OnAttachments
Robert WatsonDec 3, 2008 6:42 am 
Dan O'DonnellDec 5, 2008 8:41 am 
Todd HeberleinDec 5, 2008 9:33 am 
Stacey SonDec 5, 2008 12:44 pm 
Dan O'DonnellDec 8, 2008 4:39 pm 
Stacey SonDec 9, 2008 8:06 am 
Subject:Re: Rough plans for OpenBSM 1.1
From:Todd Heberlein (todd@mac.com)
Date:Dec 5, 2008 9:33:27 am
List:org.freebsd.trustedbsd-audit

We have a problem with our test Mac OS X 10.5.x systems where audit trails are not being properly terminated. Is that a problem unique to our systems? Or is there any projection for when proper termination will work?

It is a common problem, but I think Apple is targeting Snow Leopard for a fix for this and other BSM Leopard problems.

For a near-term work around, rotate your audit logs once after boot up, and (at least for me) the audit trail terminates correctly after that: $ sudo audit -n

Todd