Re: New rules for su root attempts

"G Ramon Gomez" <[email protected]> Fri, 25 Jul 2008 09:25:45 -0700
Newsgroups gmane.comp.security.ids.prelude.devel
Message-ID <622FD37285F1584386F5F83D9D233C9C02CC28C0@SMF-ENTXM-001.sac.ragingwire.net>
 
> Why not ?

> However, as I answered on top of this email, we already have
something. Adding the Taxonomy extension is what we should do if we
decide to keep classification.text is its current state.

> Do you folks think we should avoid doing it into AdditionnalData ?

I would prefer *not* to have it in AdditionalData if there is a more
appropriate field.  I only suggested it because it seemed
straight-forward.

- Ramon
_______________________________________________
Prelude-devel site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-devel