Linux audit v. Solaris audit
- First Post
- Replies
- Stats
-
Go to
- ----- 2025 -----
- June
- May
- April
- March
- February
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2006 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2005 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2004 -----
- December
- November
- October
- September
- August
Hello,
I'm currently working on a project where Solaris 10 was the goal, but
due to some hardware incompatabilities (solaris x86) I'm looking at
using Red Hat enterprise Linux 4.
Is the audit daemon for linux similiar to the audit daemon for solaris
10? Specifically does it do BSM auditing?
Thanks.
Mike Sponsler
sponslerm(a)netcsc.com
On Thursday 16 March 2006 12:12, Sponsler, Mike wrote:
Is the audit daemon for linux similiar to the audit daemon for
solaris
10? Specifically does it do BSM auditing?
I've never looked at the Solaris audit daemon. So, its likely to be different.
-Steve
On Fri, 2006-03-17 at 09:01 -0500, Steve Grubb wrote:
On Thursday 16 March 2006 12:12, Sponsler, Mike wrote:
> Is the audit daemon for linux similiar to the audit daemon for solaris
> 10? Specifically does it do BSM auditing?
I've never looked at the Solaris audit daemon. So, its likely to be different.
-Steve
Linux audit does not do BSM-style auditing. Specifically, Linux audit
has no support for a binary record at this time nor is there a policy
language to express the concept of "audit classes". Instead, Linux
audit has a simple "rule-based" filtering mechanism that allows one to
filter through / out auditable events.
-tim
7022
days inactive
7023
days old
linux-audit@lists.linux-audit.osci.io
2 comments
3 participants
tags (0)
participants (3)
-
Sponsler, Mike -
Steve Grubb -
Timothy R. Chavez