From: Kevin Boyce <kevin.boyce@ngc.com>
To: Dave Trepanier <dtrepanier@referentia.com>
Cc: linux-audit@redhat.com
Subject: Re: Audit issues with Snare version 1.5 and RHEL 5.3 x86_64
Date: Mon, 27 Apr 2009 18:03:48 -0400 [thread overview]
Message-ID: <1240869828.30727.346.camel@pc070168.northgrum.com> (raw)
In-Reply-To: <005101c9c77d$42aec840$8200a8c0@referentia.com>
[-- Attachment #1.1: Type: text/plain, Size: 677 bytes --]
I think the auditd package that ships with 5.3 has a bug. Use one of
the newer versions available from
http://people.redhat.com/sgrubb/audit/index.html
On Mon, 2009-04-27 at 11:15 -1000, Dave Trepanier wrote:
> uditd audit.log files stops receiving log entries until the auditd
> service is stopped and restarted. The logs entries re-start also
> after I run audit –f. I have been thinking about updating auditd ,
> currently release 7.7.7-6, to a newer release. The challenge is
> updating it without an internet connection. The machine cannot be
> connected to the internet, so all program dependencies need to be
> installed manually. Does anyone k
[-- Attachment #1.2: Type: text/html, Size: 1057 bytes --]
[-- Attachment #2: Type: text/plain, Size: 0 bytes --]
next parent reply other threads:[~2009-04-27 22:04 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <005101c9c77d$42aec840$8200a8c0@referentia.com>
2009-04-27 22:03 ` Kevin Boyce [this message]
2009-04-28 15:01 ` Audit issues with Snare version 1.5 and RHEL 5.3 x86_64 Steve Grubb
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1240869828.30727.346.camel@pc070168.northgrum.com \
--to=kevin.boyce@ngc.com \
--cc=dtrepanier@referentia.com \
--cc=linux-audit@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox