MAC because this sort of logging is the responsibility of MAC frsmeworks. Integrity control is not MAC. It appeases a few problems but misses the point. It is

MAC because this sort of logging is the responsibility of MAC frsmeworks. Integrity control is not MAC. It appeases a few problems but misses the point. It is very slow. Two orders of magnitude slower than syslogng. When there is forwarding back pressure it just shits itself. It's awfully designed from end to end. Last comment: NT has proper ACLs (object manager) but a lot of the power is lost via the win32 subsystem.