Sample Rules

Steve Grubb sgrubb at redhat.com
Fri Feb 11 15:14:26 UTC 2005


On Thursday 10 February 2005 16:26, Valdis.Kletnieks at vt.edu wrote:
> "What auditctl rules do I need to split things into classes equivalent to
> the Solaris/AIX/Irix (pick one or more) audit classes?"

This is going to take a lot of research on my part. I have never used the 
audit system of SUN machines. Nor do I want to...too much code to write at 
the moment.

It's a good question and maybe someone else that's had experience with that 
machine can help sort it out one day.

Thanks,
-Steve Grubb




More information about the Linux-audit mailing list