From: Steve Grubb <sgrubb@redhat.com>
To: linux-audit@redhat.com
Subject: Re: Auditing in old versions of Linux
Date: Tue, 30 Mar 2010 13:20:18 -0400 [thread overview]
Message-ID: <201003301320.18916.sgrubb@redhat.com> (raw)
In-Reply-To: <27921.42909.qm@web45214.mail.sp1.yahoo.com>
On Tuesday 30 March 2010 11:32:35 am Mario Chancay wrote:
> Due to technical and budget constrains, we are not yet able to migrate some
> old linux boxes to the latest versions but need to configure auditing
> under the following platforms :
>
> - Red Hat Linux Enterprise AS 3.4, 3.5, 3.6
> - Red Hat Linux 4.x
Yes it is possible, but the auditing mechanisms are different. Both are common
criteria certified. One of the requirements for common criteria is auditing.
> Need advice to confirm if auditing is possible under this versions and also
> the recommended procedure to install/setup as I understand that the auditd
> package depends on the kernel version.
That is a longer topic. There are documents available in the cert rpm that may
be able to help answer how you should set it up.
ftp://ftp.redhat.com/pub/redhat/linux/eal/
-Steve
next prev parent reply other threads:[~2010-03-30 17:20 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-03-30 15:32 Auditing in old versions of Linux Mario Chancay
2010-03-30 16:07 ` Ray Pittigher
2010-03-30 17:20 ` Steve Grubb [this message]
[not found] <mailman.41.1269964815.15431.linux-audit@redhat.com>
2010-03-30 16:58 ` Woodie, Paul E, CIV, DSS
2010-03-30 17:03 ` Ray Pittigher
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=201003301320.18916.sgrubb@redhat.com \
--to=sgrubb@redhat.com \
--cc=linux-audit@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.