Re: [audit] Upstream solution for auditing file system objects

["Paul Rolland" <rol@as2917.net>]

Hello,

You could also have a look at LIDS. Though the target is not the same,
some useful idea may be gathered there...

http://www.lids.org/

Regards,
Paul

Paul Rolland, rol(at)as2917.net
ex-AS2917 Network administrator and Peering Coordinator

--

Please no HTML, I'm not a browser - Pas d'HTML, je ne suis pas un navigateur

"Some people dream of success... while others wake up and work hard at it" 

  

> -----Message d'origine-----
> De : linux-kernel-owner@vger.kernel.org 
> [mailto:linux-kernel-owner@vger.kernel.org] De la part de 
> Timothy Chavez
> Envoyé : vendredi 10 décembre 2004 01:03
> À : linux-kernel@vger.kernel.org
> Cc : serue@us.ltcfwd.linux.ibm.com; sds@epoch.ncsc.mil; 
> rml@novell.com; ttb@tentacle.dhs.org
> Objet : [audit] Upstream solution for auditing file system objects
> 
> Greetings, 
>  
> I'm writing this e-mail to facilitate some discussion on an audit
> feature for inclusion to the mainline kernel's audit subsysystem. 
> I've written out a "brief" description of the problem with some of the
> associated problems it introduces and some of the outlines of
> potential solutions below.  For the most part, the idea stays the
> same, and the mechanism we use to implement it varies.