[PATCH] support using pam_audit.so in "account" stack

Klaus Weidner klaus at atsec.com
Mon Feb 21 22:30:02 UTC 2005


On Mon, Feb 21, 2005 at 05:21:40PM -0500, Steve Grubb wrote:
> On Monday 21 February 2005 16:11, Klaus Weidner wrote:
> > I can't get vsftp working with the pam_audit.so module, vsftpd
> > unfortunately doesn't appear to run the "auth" or "session" stack in a way
> > that works for pam_audit.so.
> 
> If you run it in the acct stack, you don't get a logout audit message do you? 
> Isn't that needed for CAPP compliance?

I'm not aware of an explicit CAPP requirement for logout messages, so I'd
consider that to be a "nice to have" feature.

-Klaus




More information about the Linux-audit mailing list