Sample Rules

Timothy R. Chavez chavezt at gmail.com
Fri Feb 11 15:43:53 UTC 2005


On Thu, 10 Feb 2005 16:26:48 -0500, Valdis.Kletnieks at vt.edu
<Valdis.Kletnieks at vt.edu> wrote:

> I can *guarantee* that something you will eventually be asked is:
> 
> "What auditctl rules do I need to split things into classes equivalent to
> the Solaris/AIX/Irix (pick one or more) audit classes?"
> 

Do you know by chance if this was supported in LAuS?  If it was, Steve
can use that as a reference example.  I don't remember this feature,
personally.  But my experience with LAuS was rather limited.

> 
> --
> Linux-audit mailing list
> Linux-audit at redhat.com
> http://www.redhat.com/mailman/listinfo/linux-audit
> 
> 
> 


-- 
- Timothy R. Chavez




More information about the Linux-audit mailing list