Messages in this thread | | | Date | Thu, 7 Jun 2007 10:13:42 +0200 (MEST) | From | Jan Engelhardt <> | Subject | Re: [PATCH] Audit: Add TTY input auditing |
| |
On Jun 6 2007 11:49, Miloslav Trmac wrote: >From: Miloslav Trmac <mitr@redhat.com> > >Add TTY input auditing, used to audit system administrator's actions.
_What_ exactly does it audit? And why does it only audit sysadmin actions? Is this supposed to be a keylogger?
>TTY input auditing works on a higher level than auditing all system
What about tty output?
>calls within the session, which would produce an overwhelming amount of >mostly useless audit events. >
Jan -- - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |