From owner-freebsd-current Wed Nov 24 1:10:47 1999 Delivered-To: freebsd-current@freebsd.org Received: from sasami.jurai.net (sasami.jurai.net [63.67.141.99]) by hub.freebsd.org (Postfix) with ESMTP id D6DB114FDC; Wed, 24 Nov 1999 01:10:42 -0800 (PST) (envelope-from scanner@jurai.net) Received: from localhost (scanner@localhost) by sasami.jurai.net (8.8.8/8.8.7) with ESMTP id EAA28238; Wed, 24 Nov 1999 04:10:08 -0500 (EST) Date: Wed, 24 Nov 1999 04:10:08 -0500 (EST) From: To: Doug Rabson Cc: "David O'Brien" , Mark Murray , Kris Kennaway , current@FreeBSD.ORG Subject: Re: FreeBSD security auditing project. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, 24 Nov 1999, Doug Rabson wrote: > We need to put audit tags into the source tree when a file is audited. > That allows the diffs to be audited later which should be a smaller job > and then the audit tag slides forward. Not to interrupt in the middle of this discussion but you might want to check with robert watson before you guys get too deep here since he is working on a FUNDED Posix.1e implementation for FreeBSD. And has already posted some EARLY MAC code. It might be usefull to work with him as well. Just a thought. Chris -- "I've always been mad, I know I've been mad, like most of us have. And you have to explain why you were mad, even if you're not mad." -PF DsoTM ===================================| Open Systems FreeBSD Consulting. FreeBSD 3.3 is available now! | Yahoo Messenger ID: opsys_98 -----------------------------------| 1402 N. Washington, Wellington, KS 67152 FreeBSD: The power to serve! | E-Mail: scanner@jurai.net http://www.freebsd.org | Consulting, Network Engineering, Security ===================================| http://open-systems.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message