On Wed, May 30, 2007 at 09:01:37PM -0600, Michael Folsom wrote:
Tony:
Here's the guts of the first message in the original thread and the
replies I got ........
Essentially what I'm not seeing in the audit.log file is the USER_END
statement after a ssh session is terminated. For my purposes the end
of any session (ssh, console, gui) needs to be recorded.
This is to anyone reading. If you have issues with audit in SuSE releases
including OpenSuSE feel free to discuss here but *please* also file a bug at
bugzilla.novell.com. Or just file the bug only, I'd much rather close bugs as
not a problem than not see them at all!!
In this case, since you were evaluating the SP1 release candidates, I'm
assuming you are familiar with Novell bugzilla. If this is not the case
drop me a line off-list and I'll help you.
Thanks
Tony