[rsbac] Logging besides syslog

[Charles Miller]

I've read in the documentation that there is some kernel level logging that 
takes place when actions are denied by rsbac.  I've seen mention of some 
circular kernel buffer.  I've noticed these logs in /var/log/messages, but 
wonder where else I can see these logs, as the security officer.  (For 
example, root can access /var/log/messages, can I have these show up 
somewhere root can't see them).  Where is this configured in rsbac?  TIA.
Charlie

_________________________________________________________________
Create a Job Alert on MSN Careers and enter for a chance to win $1000! 
http://msn.careerbuilder.com/promo/kaday.htm?siteid=CBMSN_1K&sc_extcmp=JS_JASweep_MSNHotm2