[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: auditd as logrotate replacement?



"Steve M. Robbins" wrote:
> 
> On Wed, Apr 25, 2001 at 01:03:03PM -0700, Sean 'Shaleh' Perry wrote:
> 
> > Since it is in non-us, at least for now that means it will not appear on a
> > official debian cd.
> 
> When I burned the 2.2r2 iso's last December, there was both a
> "crippled" and a "non-us" ISO for the first CD ("binary-i386-1").
> 
> Both were "official" debian CDs, as I recall.  Has this changed?
> 
> -S

Hi,

Audit[d] has no crypto code itself. The only thing
are hash functions (md5, sha1, rmd160) wich are
not restricted for any export anywhere (and AFAIK
Debian has them already).

What it does use for crypto is openssl's libcrypt,
wich is NOT needed when used as a simple (traditional)
rotate system. So Debian can ship audit[d], and if
a user wants it's advanced crypto support, she/he should
install openssl package.

Also with using auditd you have support to log protection
through hashing, and many other things.

Feel free to ask me anything you please about audit[d]


Alejo



Reply to: