> Here's a trivial update to zipl (s390-tools) to get it to write an audit
> message to syslog to report all writes of the bootloader. ...
Fabulous, Neale! The wonderful thing about SYSLOG
is that it can be directed to a network sink, not just a file.
On CMS, one could watch the traffic with a pipeline like
pipe uft 514 | xlate a2e | console
(assuming your Linux systems sent SYSLOG traffic to VM; mine do)
SYSLOG can fan-out to multiple network sinks (and/or multiple files).
Linux SYSLOG omits the time stamp seen from Solaris, HP, AIX, the rest.
-- R;
