The problem was that the root account used by systems administrators when reconfiguring parts of the system, was able to edit any of the audit trails created by the system. Freedman designed a new product, PowerBroker, that was similar in concept to today's sudo products, but which allowed centralized control and auditing of an entire network even down to the keystroke level, with the logs stored on a dedicated remote computer to which the system administrators typically did not have access.
The issue arose because the primary account used by system administrators when modifying system components, could modify any audit trails created by the system. Freedman developed a new product, PowerBroker, which was analogous to today's sudo products in concept, but allowed centralized control and auditing of an entire network, even at the keystroke level, with logs stored on a dedicated remote computer inaccessible to system administrators.