Re: Sample Rules
On Thu, 10 Feb 2005 13:50:50 PST, Casey Schaufler said:
Chuckle. Irix does not have audit classes.
This is for the simple reason that Solaris
does and the lesson learned is that it is
impossible to find any two people who can
agree on what should be grouped together.
On Irix you have to tell it what events
you want.
As a first cut, probably a list of equivalences (Irix calls the
record Foo, Solaris Bar, AIX Baz - use Quux on Linux) would be a big
help...
Attachments:
- attachment.sig (application/pgp-signature — 226 bytes)