[audio]

Originally Posted by anomie

I was talking about the daemon's logging itself. I don't know much about FBSD's Security Event Auditing, but you should check it out: http://www.freebsd.org/doc/en_US.ISO...ook/audit.html

I'll check that out. Hopefully it can do user specified accounting. It would be great to be able to see a user only used by a service was accessing unusual commands like id; uname -a;w or similar.