OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
FreeBSD Security Archives: Re: Real-time alarms

Re: Real-time alarms


Wes Peters (wessoftweyr.com)
Sat, 18 Sep 1999 20:04:11 -0600


Brett Glass wrote:
>
> At 11:24 PM 9/17/99 -0700, Rodney W. Grimes wrote:
>
> > Real time alarms if someone even _tries_
> >to modify a schg file is what is missing... someone turning off
> >schg on a file is another thing missing... or accessing the disk
> >through the raw device to reset the bit, etc, etc...
>
> I like this idea a LOT.

This is what we're talking about with the auditing facility. There are
a lot of architectural issues to be solved, starting with "what is an
alarm" and ending with "how do I securely transmit the alarms to those
who need to know about them"?

Fun stuff, eh?

-- 
            "Where am I, and what am I doing in this handbasket?"

Wes Peters Softweyr LLC wessoftweyr.com http://softweyr.com/

To Unsubscribe: send mail to majordomoFreeBSD.org with "unsubscribe freebsd-security" in the body of the message



This archive was generated by hypermail 2.0b3 on Sat Sep 18 1999 - 21:05:13 CDT