Date: Sun, 24 Sep 2006 18:19:30 GMT From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 106609 for review Message-ID: <200609241819.k8OIJUQv056629@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://perforce.freebsd.org/chv.cgi?CH=106609 Change 106609 by rwatson@rwatson_fledge on 2006/09/24 18:19:09 Add history item about new audit_warn event. Affected files ... .. //depot/projects/trustedbsd/openbsm/HISTORY#39 edit Differences ... ==== //depot/projects/trustedbsd/openbsm/HISTORY#39 (text+ko) ==== @@ -11,6 +11,9 @@ line; this was the documented behavior previously, but it was not implemented. Be more specific in auditreduce(1)'s examples section about what might be done with the output of auditreduce. +- Add audit_warn(5) closefile event so that administrators can hook + termination of an audit trail file. For example, this might be used to + compress the trail file after it is closed. - auditreduce(1) now uses regular expressions for pathname matching. Users can now supply one or more (comma delimited) regular expressions for searching the pathnames. If one of the regular expressions is prefixed with a tilde @@ -261,4 +264,4 @@ to support reloading of kernel event table. - Allow comments in /etc/security configuration files. -$P4: //depot/projects/trustedbsd/openbsm/HISTORY#38 $ +$P4: //depot/projects/trustedbsd/openbsm/HISTORY#39 $
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200609241819.k8OIJUQv056629>