* lspp.rules and time changes
@ 2006-07-18 18:18 Steve
0 siblings, 0 replies; only message in thread
From: Steve @ 2006-07-18 18:18 UTC (permalink / raw)
To: linux-audit
I know updating contrib/lspp.rules isn't a priority, but if anyone is
trying to catch changes to the system time, you may find this useful...
I tried out the rule in lspp.rules that should catch changes in the
system time and discovered that it doesn't catch changes made by the
date command. date uses the clock_settime syscall instead of adjtimex
or settimeofday.
Steve
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2006-07-18 18:18 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-07-18 18:18 lspp.rules and time changes Steve
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.