From: Chris Wright (chrisw_at_osdl.org)
Date: Thu 14 Jul 2005 - 23:55:51 BST

• Previous message: Herbert Poetzl: "Re: [Vserver] audit interface"
• In reply to: Herbert Poetzl: "Re: [Vserver] audit interface"

* Herbert Poetzl (herbert_at_13thfloor.at) wrote:
> hmm, does anybody know why pam would want to do syscall
> auditing in the first place? I'm a little lost here
> actually ...

Pam sets up the auid for each login session. This requires
CAP_AUDIT_WRITE. The auid is then used in any messages generated
via syscall auditing.

thanks,
-chris
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

• Previous message: Herbert Poetzl: "Re: [Vserver] audit interface"
• In reply to: Herbert Poetzl: "Re: [Vserver] audit interface"