sample 5.3 based trusted os ;-)

[Ilmar S. Habibulin]

On Thu, 20 Jan 2005, Wayne Salamon wrote:

> Are you referring to the event->classs mapping table? If so, then that
> is present in audit3. We rely on auditd (the audit daemon) to
> initialize that table from the /etc/security/audit_event file.
Oh, i see. solaris uses auditconfig utility in startup script. I
implemented solaris approach. Even in auditd management via audit
command(script). But i think that rcNG based management is much better,
because it is *bsd native way now.

> Right now, I'm working on changing the kernel->userspace audit trigger
> mechanism. And now that Robert has imported the test suite, I'll be
> merging in changes that are needed for the TrustedBSD versions.
Are you talking about fifo between audit_worker and auditd?

To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-discuss" in the body of the message