James Litchfield wrote: > Alas, if Darren is looking for a general solution, C2 auditing is very > definitely > not the norm in the customer base.
Only because it isn't on by default and requires a reboot to get it so. There are projects in the works to get it on by default and once we have the kernel part always running then it is probably worth having the 'lo' class always enabled too. -- Darren J Moffat
