Re: pam_tty_audit

2012-12-12 Thread Miloslav Trmac
Hello, - Original Message - But if user1 does log on, no commands are logged Are you talking about TTY or USER_TTY records, and are you checking immediately after entering the command, or after exiting the session? Unprivileged users are not allowed to send USER_TTY records as

audit 2.2.2 released

2012-12-12 Thread Steve Grubb
Hi, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit. It will also be in rawhide soon. The ChangeLog is: - In auditd, tcp_max_per_addr was allowing 1 more connection than specified - In ausearch, fix matching of object