[redhat-lspp] Re: New Audit types

Linda Knippers linda.knippers at hp.com
Wed Nov 2 20:54:29 UTC 2005


> Given that, what is the correct action? LSPP says that its an auditable event 
> - it doesn't say it must be prevented. 

It also doesn't say it can't prevented or restricted.

-- ljk




More information about the Linux-audit mailing list