=== Keybuk_ is now known as Keybuk [19:16] Keybuk: did you see the audit patch on upstart devel list? [19:17] I've seen it before [19:17] I assume that it is the same one [19:17] Keybuk: I don't know, could be. [19:17] Keybuk: the guy who wrote it wants us to roll it into our rpms. What's your opinion of the patch itself? [19:18] without knowing what audit does, it's hard to say [19:18] Keybuk: fancy logging. [19:19] notting: you can elaborate if you like. I'm not much of an expert either. [19:20] kernel-based audit trail of events [19:20] less forgeable than syslog, i suppose [19:20] so syslog for security crazies [19:21] (not to be mean, I love those guys) [19:22] structured syslog [19:22] (defined events, defined fields, etc.) [19:23] that's nice