From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: [PATCH] Audit: add session id to audit messages Date: Wed, 19 Dec 2007 13:03:19 -0500 Message-ID: <200712191303.19768.sgrubb@redhat.com> References: <1197661350.3005.86.camel@localhost.localdomain> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <1197661350.3005.86.camel@localhost.localdomain> Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Eric Paris Cc: linux-audit List-Id: linux-audit@redhat.com On Friday 14 December 2007 14:42:30 Eric Paris wrote: > In order to correlate audit records to an individual login add a sessio= n > id. =C2=A0This is incremented every time a user logs in and is included= in > almost all messages which currently output the auid. =C2=A0The field is > labeled ses=3D =C2=A0or oses=3D I haven't actually compiled and run this patch, but reviewing what its do= ing=20 looks good to me. ACK. -Steve