Re: [RFC] TTY auditing

2007-06-02 Thread Steve Grubb
On Friday 01 June 2007 18:07:17 Miloslav Trmac wrote: Hello, the attached patches propose a way to audit administrative commands. Thanks for working on this problem. This should close the last gap for NISPOM, PCI, and DCID 6/3. Its important to have this capability. Summary --- A

[RFC] TTY auditing

2007-06-01 Thread Miloslav Trmac
Hello, the attached patches propose a way to audit administrative commands. Summary --- A per-process audit TTY input attribute is added. The attribute is inherited across fork (). A new PAM module is used to turn the attribute on or off on login. Data read from TTYs by processes with the