security

Several hundred machines had already been fielded when RRecktek received the requirement: prove, on demand, every time someone was denied access to a file — NISPOM Chapter 8. This is how the auditing was retrofitted without re-imaging a single box, and the small revelation at the center of it: the log line a human reads says 'failed,' but the thing you actually count is a number, -13, which the kernel's own header file names as EACCES, 'Permission denied.'