Isn ZFPAudit sort of dangerous, from a security perspective?
A. No – with qualifications. ZFPAudit works in the context of the existing security model. This means that if you don’t already have administrator privileges on the system to be audited, you can’t perform the audit. That said, the ZFPAudit code and plug-ins do run at this elevated privilege, once you have provided an administrator-equivalent ID and login. Original ZFPAudit code and plug-ins are thoroughly tested, but there is always the possibility for new situations and undetected bugs. If you write your own plug-ins or modify the ZFPAudit code, you should test your changes in a test environment before use on client computers. If you obtain plug-ins from other authors, or obtain ZFPAudit tools from an untrusted source, you should take steps to ensure that the software is legitimate.
