Linux News
The world is talking about GNU/Linux and Free/Open Source Software
Tips from an RHCE: Visualizing audit logs with mkbar
|
|
The 2.6 Linux kernel comes with a very flexible and powerful auditing subsystem called auditd. auditd is composed of two parts. The main work is done in kernel-space. In user-land, auditd is listening for generated audit events. auditd is able to log file-watches as well as syscalls. All LSM-based subsystems–for example, SELinux–are logging via auditd as well.
|
|
Full Story |
This topic does not have any threads posted yet!
You cannot post until you login.
