--- Klaus Weidner <klaus at atsec.com> wrote: > That one is easy to fix by including a current > webcam picture of the user > in each audit record in addition to the auid ;-) This was in the spec for Irix 6.6 auditing. Really, I'm not kidding. Casey Schaufler casey at schaufler-ca.com