[SASAG] Next Meeting 10/13: Linux System Audits

[Ski Kacoroski]

Date: 	October 13th, 2011
Time: 	7pm
Place: 	EE1 Building (Electrical Engineering)
         Room 403
         University of Washington Campus
Directions: 	http://www.ee.washington.edu/about/contact.html
Subject: 	Linux System Audits
Presenter: 	Gary Smith

One of a Linux system manager’s worst nightmares is when the auditors 
come in and they start asking questions. One of the questions they’re 
bound to ask in these compliance-ridden days is “Do you track root level 
activity?” How do you track root’s activity? Sudo and process accounting 
aren’t enough for the purposes of compliance, change management, 
auditing, and incident response. As Larry Wall, the inventor of Perl 
said, “There’s more than one way to do it.” We’ll explore the several 
Open Source ways to track root’s activity and get the auditors off our 
backs (at least on this instance).

———-

As always, there will be dinner sponsored by Silicon Mechanics. Check 
them out at http://www.siliconmechanics.com/

There will also be several CACert assurers present.

The meeting will be at the Electrical Engineering building on the
University of Washington Campus, aka EE1. Directions are linked to the
EE Department’s web site above. Parking is $5 after 5pm.