[PATCH 00/07][RFC] RACF audit plugin

Klaus Heinrich Kiwi klausk at br.ibm.com
Fri Sep 28 19:42:50 UTC 2007


On Fri, 28 Sep 2007 14:47:18 -0400, Steve Grubb wrote:

> Thanks for this patch Klaus. I'll see about integrating it. What
> platforms should this be enabled for? All or something specific? IOW if
> this was built on i386, would it be used?
> 

Steve,
 despite the RACF server being z/OS only, pretty much any arch can 
benefit from audit event consolidation, so I'd suggest enabling it to all 
archs. In my development env, I've successfully tested it in x86_64 and 
s390x.

Thanks,

 Klaus K.





More information about the Linux-audit mailing list