All of lore.kernel.org
 help / color / mirror / Atom feed
From: Steve Grubb <sgrubb@redhat.com>
To: MontyRee <chulmin2@hotmail.com>
Cc: linux-audit@redhat.com
Subject: Re: which kernel config is required?
Date: Thu, 25 Oct 2007 09:59:34 -0400	[thread overview]
Message-ID: <200710250959.35310.sgrubb@redhat.com> (raw)
In-Reply-To: <BLU116-W2246C295DD49BFE6973D2285940@phx.gbl>

On Wednesday 24 October 2007 07:43:01 pm MontyRee wrote:
> But I don't use rpm based kernel which installed automatically from the CD
> but downloading the kernel source from the kernel.org site and compiles the
> kernel. 

Part of the value that a distribution provides is coordinating all the pieces 
to work together. When you do your own upgrades outside of the distribution, 
you have to know a whole lot about how the whole thing works.

If you want cutting edge system, I recommend going to F8t3 also known as 
rawhide and F8 as soon as that is released. All the pieces are coordinated so 
they work together. If you want something recent and very stable, look to 
RHEL5 or its derivatives. If you want something well tested and stable, use 
RHEL4 or its derivatives. 

But you cannot mix kernels between RHEL4 & 5. Even replacing the audit daemon 
might not be enough. I suspect you will have to recompile everything that 
depends on libaudit.

> So I can use 2.6.19 or 2.6.23, but I don't know which menu should 
> be selected to use full auditd function?

In recent kernels, I think the setting you mentioned in the first email is all 
you need.

> Surely, I will use RHEL 5 based system sooner, but I must do kernel compile
> for some reason.

I really don't know if you can mix 2.6.23 with RHEL5. There are big changes in 
hotplug, for example, and other things that the packages shipped with RHEL5 
(udev/hal) might not work with. You'll have to try it to find out. But 
another reason to stick with a distribution's kernel is that not even the 
2.6.23 kernel has all the audit pieces that the RHEL5.1 kernel has. They are 
merging with the 2.6.24 kernel.

> you mean File systems  ---> Filesystem in Userspace support?

Nope. I was talking about the actual RHEL4 kernel, not 2.6.23.

Good Luck...

-Steve

      parent reply	other threads:[~2007-10-25 13:59 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2007-10-23  2:38 which kernel config is required? MontyRee
2007-10-24 14:43 ` Steve Grubb
2007-10-24 23:43   ` MontyRee
2007-10-25  0:24     ` Eric Paris
2007-10-25 13:59     ` Steve Grubb [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=200710250959.35310.sgrubb@redhat.com \
    --to=sgrubb@redhat.com \
    --cc=chulmin2@hotmail.com \
    --cc=linux-audit@redhat.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.