atom feed4 messages in org.freebsd.trustedbsd-discusslinux port of /dev/audit
FromSent OnAttachments
Beat ChristenMay 22, 2000 12:45 pm 
Dominik KublaMay 22, 2000 2:06 pm 
Andrew ReiterMay 22, 2000 2:25 pm 
Robert WatsonMay 22, 2000 5:26 pm 
Subject:linux port of /dev/audit
From:Dominik Kubla (domi@uni-mainz.de)
Date:May 22, 2000 2:06:55 pm
List:org.freebsd.trustedbsd-discuss

On Mon, May 22, 2000 at 02:46:12PM +0200, Beat Christen wrote:

Hi BSD people.

I will be working on a /dev/audit port for the linux kernel as part of my masters thesis. To reduce double work, I'll try to stay compatible with the TrustedBSD /dev/audit binary format. Is there already a document on what this will look like, besides the source?

Hold your horses: the folks at SGI (Linda Walsh and others) are already working on an audit subsystem for Linux. You might want to get in touch with them first to avoid duplicate efforts...

Also check the linux-kernel archives, because there was a whole lot of discussion going on recently.