[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: auditd -- User space tools for 2.6 kernel SELinux auditing

On Friday 23 March 2007 05:42, Manoj Srivastava <srivasta@debian.org> wrote:
>         I would prefer you do move it back to /sbin. A number of
>  SELinux tools are moving to depend on audit, and some of these do
>  require them to be functional before the other file systems are
>  mounted. I can live with  them being in /usr, but that does reduce
>  the functionality of user tools for SELinux in early boot.

I think it's probably best to leave it in the upstream location in this case.  
However given that /var/log will probably be a separate FS and /var/log/audit 
will certainly be a separate FS for anyone who is really serious about 
auditing it seems that relying on /usr isn't going to be a problem - non-root 
FSs have to be mounted before auditd is started anyway.

>         Thanks for taking up audit, BTW, or else I wqould have had top
>  package it myself for lenny, and I don't really want any more
>  packages than I already have.


http://etbe.blogspot.com/          My Blog

http://www.coker.com.au/sponsorship.html Sponsoring Free Software development

Reply to: