[redhat-lspp] auditing under lspp

Michael C Thompson mcthomps at us.ibm.com
Thu Sep 22 13:57:49 UTC 2005





> > I was thinking to create name spaces so that the command is structured
> > more like
> >
> > auditctl <subsystem> [options]
> >
> > where subsystem is syscall, file, net, keys, config, ...
> > and no subsystem defaults to syscall. This is kind of like the ip
> > command. The subsystem would basically decide which getopt to call. Is
> > that too confusing?
>
> I think this is accomplished pretty successfully with the mdadm RAID
> tools command.  And I don't think that this necessarily steps on top of
> what Tim is suggesting...  I think it's a *great* idea to support both
> --filter and -F.  That would really make some of the more complicated
> controls self-documenting.

Agreed. The use of namespaces and long opts should be used. I like the
seperation of the subsystems by using the namespace, it adds a nice touch,
since its possible for someone to determine what is being affected by a
potentially long & complex command by simply looking at the namespace opt.

Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/redhat-lspp/attachments/20050922/89d011f0/attachment.htm>


More information about the redhat-lspp mailing list