[grsec] Re: Could simplifying a log result in a different policy?
Brad Spengler
spender at grsecurity.net
Wed Apr 13 21:02:49 EDT 2005
> In other words: does the order of different loglines or the
> number of occurences of the same logline affect the learing
> heuristics in any way?
The order and number of occurrences of the loglines is irrelevant to the
learning heuristics and generated policy. This should make sense, as
the grlearn daemon makes a best effort at keeping duplicate entries from
being written to disk.
-Brad
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20050413/51ad8ec5/attachment.pgp
More information about the grsecurity
mailing list