Linux syslog, log failed object access

fondue

Greetings,
I've banged my head against the wall long enough, I need help. I have to secure a Linux box to include failed access by users if they attempt to access objects or directories that they shouldn't. It logs everything except the failed local object attempts. The PC can't have any extra packages, such as Snare, installed that aren't part of Mandrake 9.1.

Is there a way to set msec or a syslog parameter to enable logging failed object access attempts?

RussS

Hey fondue - not sure of what packages come with Mandrake 9.1 as I don't use it. However http://www.rsbac.org/why.php might be of help to you.