		README
		~~~~~~

    1. BRIEF DESCRIPTION
    2. SUPPORTED PLATFORMS
    3. HOW TO USE AUDIT
    4. MAILING LISTS AND RELATED STUFF


1. BRIEF DESCRIPTION
~~~~~~~~~~~~~~~~~~~~
    Audit is a client/server tool that allows remote system logs
    auditing and centralizing, it supports standard and modular syslog
    output formats.
    The server (auditd) runs on audited machines and the client (audit)
    runs on the auditors workstations. Multiple auditors are supported
    and managed by one or more auditors 'chiefs'; each auditor can be
    configured in a way allowing them to examine specific sets of logs.


2. SUPPORTED PLATFORMS
~~~~~~~~~~~~~~~~~~~~~~
    Supported platforms are:
	o OpenBSD
	o NetBSD
	o FreeBSD
	o RedHat-Linux
	o Windows NT Server (only client)

    Others platforms will be added in future.
    This release was tested on:
	o OpenBSD 2.8, OpenBSD 2.9 (i386 and sparc)
	o FreeBSD 4.3
	o RedHat-Linux-7.1
	o Windows NT4 Server Service Pack 6 (only client).


3. HOW TO USE AUDIT
~~~~~~~~~~~~~~~~~~~
    Read audit(1) and auditd(8) man pages; there is also an example
    configuration file at ./auditd.conf.
    If you have questions or suggestions please send them to the
    audit-usr mailing list.


4. MAILING LISTS
~~~~~~~~~~~~~~~~
    You can check the mailing lists at
    http://www.corest.com/solutions/lists.php; two of them are related
    to audit stuff:

	o audit-dev:
	    This mailing list is for technical discussions about
	    auditing systems. It's intendend for developers or any
	    other person interested in the inner working parts of
	    audit.

	o audit-usr:
	   This mailing list is for general discussions about
	   auditing systems.

    Send a message to majordomo@corest.com with the text
    "subscribe list-name" in the message body, replacing list-name by
    the name of the choosen list. You can also send an email to the
    developers at core.devel.alat@corest.com.
    There are also others related mailing lists:

	o alat-announce:
	    News and announcements about releases and patches to all
	    wisdom products (http://www.corest.com/download/download.html).

	o msyslog-dev:
	    This mailing list if for technical discussions about
	    modular syslog. It's intendend for developers or any
	    other person interested in the inner working parts of
	    modular syslog.

	o msyslog-usr:
	    This mailing list is for general discussions about
	    modular syslog.

 
$CoreSDI: README,v 1.17 2001/12/31 17:55:40 claudio Exp $

