Date: Mon, 20 Sep 1999 07:16:26 -0700 (PDT) From: "Rodney W. Grimes" <freebsd@gndrsh.dnsmgr.net> To: ark@eltex.ru Cc: security@FreeBSD.ORG Subject: Re: Real-time alarms Message-ID: <199909201416.HAA58893@gndrsh.dnsmgr.net> In-Reply-To: <199909201021.OAA00729@paranoid.eltex.spb.ru> from "ark@eltex.ru" at "Sep 20, 1999 02:21:17 pm"
next in thread | previous in thread | raw e-mail | index | archive | help
> > Hmmm, i think it is a good idea to have 2 kernel interfaces: > > 1) audit - one way communication system that lets kernel and possibly > some user processes to inform an audit daemon or whatever that something > important happened By definision a secure audit trail can only be generated by a secure code base, that pretty much precludes any user processes from being a source of data at this time. > 2) acl device that will provide 2-way communication to a daemon that will > allow or deny things to happen? This is no longer auditing, that would be under another thread, one about security control, and goes hand in hand with the proposal I tossed out about VMS like per process priviledges. -- Rod Grimes - KD7CAX - (RWG25) rgrimes@gndrsh.dnsmgr.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199909201416.HAA58893>