[PATCH] log all actions by privileged user in bash

Steve Grubb sgrubb at redhat.com
Tue Feb 20 01:16:17 UTC 2007


On Tuesday 06 February 2007 18:21:06 Valdis.Kletnieks at vt.edu wrote:
> I can think of enough ways to bypass it that I have a hard time
> convincing myself that it has any hope of making an auditor happy.

You raised a lot of really good points. I haven't forgotten this patch, I will 
revisit it again soon after I get some new audit features finished.

Thanks,
-Steve




More information about the Linux-audit mailing list