Audit standards other than POSIX.1E

[Andrew R. Reiter]

After struggling with POSIX.1E audit specification, I've come to the
conclusion that the TrustedBSD audit code would most likely not go along
that path.  However, it would be nice to still try and adhere to some
standard... but, not sure which direction to go with this.  So, I guess I
am asking for peoples opinion on their experience with other audit
standards and what you've all done in the past wrt to this issue.  On the
other hand, if you've done an implementation that does not truly adhere to
a standard, I'd enjoy hearing about what you did in terms of decisions to
go this route and perhaps what other, if any, implementation/spec helped
you make decisions along the way.

Cheers,
Andrew

--
Andrew R. Reiter
arr at watson.org
arr at FreeBSD.org


To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-audit" in the body of the message