[PATCH] enable /proc/$$/loginuid
Casey Schaufler
casey at schaufler-ca.com
Mon Jan 17 22:41:59 UTC 2005
--- Leigh Purdie <Leigh.Purdie at intersectalliance.com>
wrote:
> Believe it or not, it still does. :(
> The solaris auditd functions as a 'management layer'
> for the kernel, but
> effectively all it really does, is:
> a) turn on/off particular events according to
> configurations
> in /etc/security/audit_control, audit_event, and
> audit_class
> b) open a file (eg:
> /var/audit/1234567.not-terminated.log), and pass the
> file handle + a 'exit auditsvc if disk space falls
> below this threshold'
> parameter to the auditsvc() system call.
Yerg. Code I wrote before my forehead
meet my bald spot, still in use.
=====
Casey Schaufler
casey at schaufler-ca.com
__________________________________
Do you Yahoo!?
Yahoo! Mail - You care about security. So do we.
http://promotions.yahoo.com/new_mail
More information about the Linux-audit
mailing list