Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!uunet!ibism!ibism.UUCP!rwu
From: rwu@ibism.UUCP (Raymond Wu)
Newsgroups: comp.unix.wizards
Subject: Re: UNIX Security and Monitoring
Message-ID: <12402@ibism.uucp>
Date: 3 May 91 23:42:02 GMT
References: <78@morwyn.UUCP> <33046@mimsy.umd.edu>
Sender: news@ibism.uucp
Organization: Citibank IBISM
Lines: 21

Well, ahow about looking at it from a different angle:

Let's suppose that you're a paranoid systems security administrator
and you have a need to monitor / review all the events that transpired
when access to the production environment was granted to a programmer / support person.  Yes, the logons are restricted in such a way that someone must turn on the account for you.  This adminstrator's sole purpose in life is to ensure that no support person will load in unauthorized code or inflict some damage to the physical environment.


By the way, what's the answer to the availability of such a beast - I happen
to know of an organization that is on the lookout for this monitoring / playback capability.



=========================================================================

	Raymond Wu
	Citibank                           Phone:   (212) 657-5426
	111 Wall Street                    Fax:     (212) 825-8607
	17th floor / zone 10               E-Mail:   uunet!ibism!rwu
	New York City, New York    10043

============================================================================