Audit plug-ins development

Klaus Heinrich Kiwi klausk at br.ibm.com
Tue Aug 7 14:10:07 UTC 2007


Steve,

 I'm interested in developing an audit plug-in to forward events to z/OS
RACF (sort of a centralized AAA facility for IBM System Z systems). 

I know that the [new] audit dispatcher and the whole audit infrastructure
isn't quite ready yet, but I'd like to start advancing things on my side.

What is your general idea for audit plug-ins deploymet? Would we be able to
contribute the plug-ins to the audit userspace so that they can be
available in the audit source package, and then maybe in a separate binary
package upon building? Can you give us some hints about how would you want
this code contributions and how would you want these blended in the audit
tree?

Thanks,

 Klaus K.


-- 
.:klaus h kiwi <klausk at br.ibm.com>:.




More information about the Linux-audit mailing list