Re: audit test results on lspp.12 kernel
Steve Grubb wrote:
On Monday 20 March 2006 13:38, Linda Knippers wrote:
>Maybe you could post something about the standard logging
>function and what the records ought to look like these days?
There is work ongoing for a new parsing library. I think changing over to it
will solve everybody's problems...or at least it will cause standardization
since we'll be able to get similar results.
I'm still interested in what the records in audit.log look like.
Our test suite already parses those records and its pretty forgiving
when it comes to format. I'm more interested in information that's
being added or removed as that's what seems to have happened in
the trusted programs.
-- ljk