Re: auditing for RHEL ES4

[Kevin Boyce <kevin.boyce@ngc.com>]

[-- Attachment #1.1: Type: text/plain, Size: 1269 bytes --]

Oops, don't forget to recompile, and then the "rpm -Uhv"

On Fri, 2007-11-16 at 11:11 -0500, Kevin Boyce wrote:

> I would download the source rpms, make your changes, change the
> version, and use the "rpm -Uhv" to upgrade existing packages.
> 
> Kevin Boyce
> Northrop Grumman Corp.
> 
> 
> On Fri, 2007-11-16 at 10:54 -0500, Bill Tangren wrote: 
> 
> > I'm running RHEL ES 4 servers, and am having difficulty with aureport. I'm
> > using audit version 1.0.15-3, the one that comes with the OS. The problem
> > is that I need daily reports, and it is not doing it. The reports always
> > cover the entire range of available logs (sometimes gigabytes of data).
> > The reports can take a LONG time to compile, and it doesn't give me the
> > daily snapshot I need. I'm thinking of installing the latest tarball and
> > compiling, as I understand more recent versions of aureport have
> > implemented time limits. [I've emailed this list before about this.]
> > 
> > My question now is, is it possible to uninstall the prepackaged audit and
> > audit-lib, and install the latest from source, without seriously hosing my
> > system?
> > 
> > TIA,
> > 
> > 
> 
> --
> Linux-audit mailing list
> Linux-audit@redhat.com
> https://www.redhat.com/mailman/listinfo/linux-audit

[-- Attachment #1.2: Type: text/html, Size: 2285 bytes --]

[-- Attachment #2: Type: text/plain, Size: 0 bytes --]