best way to audit in vfs

Leigh Purdie Leigh.Purdie at intersectalliance.com
Tue Dec 14 22:41:51 UTC 2004


On Tue, 2004-12-14 at 13:28 -0800, Chris Wright wrote:
> Hmm, it's been a while since I looked at CAPP audit requirements, but
> doesn't it require action if log is full?  E.g., possibly not allowing
> request to complete?

Still in there I think - has been since C2. Never turned on in ANY
agency I've ever been to though, so I don't recommend stressing too much
over the implementation. ;)

L.
-- 
Leigh Purdie, Director - InterSect Alliance Pty Ltd
http://www.intersectalliance.com/




More information about the Linux-audit mailing list