Which userspace packages modified for audit

Marcus Meissner meissner at suse.de
Sun Feb 25 18:41:56 UTC 2007


On Sun, Feb 25, 2007 at 01:41:38PM -0500, Steve Grubb wrote:
> On Friday 23 February 2007 09:22:42 Matthew Booth wrote:
> > If you get a minute, can you add a 1 line summary of what the
> > modification does wrt auditing?
> 
> I don't have time to document this for a while. They are generally all logging 
> something.

Most of them have just support for emitting USER_LOGIN audit records.

Are these necessary, because PAM emits USER_START / USER_END records anyway...

Ciao, Marcus




More information about the Linux-audit mailing list