Re: Is this mail list dead?

["David L. Nicol" <david@kasey.umkc.edu>]

Casey Schaufler wrote:

> Any pervasive kernel facility, and audit will be, no
> question about that, that you try to maintain on the side
> gets broken every time someone changes anything. I have years
> of experiance on this, and can show you the scars.


Adding a standard framework for providing audit data seems like
it would be a small patch and might be accepted into Standard Kernel

Has L.T. said specifically that he is against including a framework
for making audit info available?  "BSD Process Accounting" has been
there quite a while; what more, if you  don't mind repeating what
can surely be found with an hour of RTFMing, would be requiered, that
BSD-PA does not provide, to have a C2-compliant audit trail?

-
Securedistros: A common list for all secured Linux distributions
Archive:       http://humbolt.nl.linux.org/lists/