audit problems
Stanislav Sedov
stas at FreeBSD.org
Thu Feb 8 17:15:20 UTC 2007
Hi!
I'm experiencing some problems configuring audit on 6.2-RELEASE system.
It doesn't seem to log anything except login messages. The only thing
I've modified in config is the root user specification in audit_users.
Now it looks like this:
root:lo,ex,fw,fc:no
However nor ex, non fw or fc messages doesn't get into the log.
Furthermore, deleting lo from audit_users and audit_control doesn't stop
login messages logging.
Is it possible that some other kernel options interfere with AUDIT
(e.g. MAC)?
Thanks!
--
Stanislav Sedov
ST4096-RIPE
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20070208/d2189a56/attachment.pgp
More information about the freebsd-security
mailing list