On Sun, Feb 25, 2007 at 01:41:38PM -0500, Steve Grubb wrote: > On Friday 23 February 2007 09:22:42 Matthew Booth wrote: > > If you get a minute, can you add a 1 line summary of what the > > modification does wrt auditing? > > I don't have time to document this for a while. They are generally all > logging > something.
Most of them have just support for emitting USER_LOGIN audit records. Are these necessary, because PAM emits USER_START / USER_END records anyway... Ciao, Marcus -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
