[Infrastructures] Change Audit Trail
Wesley Craig
wes@umich.edu
Thu, 1 Sep 2005 22:06:41 -0400
On 27 Aug 2005, at 14:14, Kyle Moore wrote:
> The only thing I can think of is to use Tripwire in addition to one
> of these tools to track the changes.
radmind *is* a tripwire. Changes are made by detecting differences
between the known good state and the state of a system. You can
further detect whether this change is a planned change, being pushed
by an admin, or an "unplanned" change to the local configuration.
Because of this distinction between planned and unplanned changes, it
is possible to implement lightweight procedures on the radmind server
to gate all changes. This gate can serve as review, acceptance
testing, audit, etc.
:wes