On Mon, May 8, 2017 at 2:20 AM, Stephan Müller <smueller(a)chronox.de&gt; wrote: Just to be clear, you are talking about the test suite hosted on GitHub (see the URL in Richard's original mail) and not the older test suite hosted on SF.net and commonly used for Common Criteria evaluations? -- paul moore www.paul-moore.com

Richard, I have yet to start using the test suite, but I am looking for a Linux auditd testing capability which will provide - a human readable description of the user or system entity's interaction with Linux for a given test - the commands that enact the above test - the resultant auditd file which I can run though ausearch -i/aushape for processing And generate this for each possible event and event sub-variant (e.g iterate over all syscalls and variants) that the Linux kernel and other mainstream utilities can generate. I have been through https://sourceforge.net/projects/audit-test/ but this is problematic as it was difficult to get all the above AND pump the output into ausearch -i as it was processing. Rgds On Sun, 2017-05-07 at 12:43 -0400, Richard Guy Briggs wrote: