[PATCH] log all actions by privileged user in bash
Steve Grubb
sgrubb at redhat.com
Tue Feb 20 01:16:17 UTC 2007
On Tuesday 06 February 2007 18:21:06 Valdis.Kletnieks at vt.edu wrote:
> I can think of enough ways to bypass it that I have a hard time
> convincing myself that it has any hope of making an auditor happy.
You raised a lot of really good points. I haven't forgotten this patch, I will
revisit it again soon after I get some new audit features finished.
Thanks,
-Steve
More information about the Linux-audit
mailing list