From: Chris Wright (chrisw_at_osdl.org)
Date: Thu 14 Jul 2005 - 23:55:51 BST
* Herbert Poetzl (herbert_at_13thfloor.at) wrote:
> hmm, does anybody know why pam would want to do syscall
> auditing in the first place? I'm a little lost here
> actually ...
Pam sets up the auid for each login session. This requires
CAP_AUDIT_WRITE. The auid is then used in any messages generated
via syscall auditing.
Vserver mailing list