RE: Latest diffs

[Chad Hanson <chanson@TrustedCS.com>]

It is definitely desirable to a have an audit role where another user can
log onto the analyze the audit trail of a system to determine if there has
been malicous activity on the system by users or administrators.

This approach is follows the traditional seperation of duty concept.

-Chad

> -----Original Message-----
> From: Christopher J. PeBenito [mailto:cpebenito@tresys.com]
> Sent: Thursday, April 20, 2006 1:18 PM
> To: Daniel J Walsh
> Cc: SE Linux
> Subject: Re: Latest diffs
> 
> 
> On Thu, 2006-04-20 at 14:06 -0400, Daniel J Walsh wrote:
> > Added and fixed Russells patch to add auditadm_r.
> 
> Why do we need an auditadm in addition to secadm?
> 
> -- 
> Chris PeBenito
> Tresys Technology, LLC
> (410) 290-1411 x150
> 
> 
> --
> This message was distributed to subscribers of the selinux 
> mailing list.
> If you no longer wish to subscribe, send mail to 
> majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.
> 

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.