On Wed, May 30, 2007 at 09:01:37PM -0600, Michael Folsom wrote: > Tony: > > Here's the guts of the first message in the original thread and the > replies I got ........ > > Essentially what I'm not seeing in the audit.log file is the USER_END > statement after a ssh session is terminated. For my purposes the end > of any session (ssh, console, gui) needs to be recorded.
This is to anyone reading. If you have issues with audit in SuSE releases including OpenSuSE feel free to discuss here but *please* also file a bug at bugzilla.novell.com. Or just file the bug only, I'd much rather close bugs as not a problem than not see them at all!! In this case, since you were evaluating the SP1 release candidates, I'm assuming you are familiar with Novell bugzilla. If this is not the case drop me a line off-list and I'll help you. Thanks Tony -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
