From: Steve Grubb <sgrubb@redhat.com>
To: linux-audit@redhat.com
Cc: "Todd, Charles" <CTODD@ball.com>
Subject: Re: Audit-1.0.14
Date: Mon, 13 Nov 2006 09:19:44 -0500 [thread overview]
Message-ID: <200611130919.44418.sgrubb@redhat.com> (raw)
In-Reply-To: <C482FF98AE985A47B8C982FD429C9E3401370D18@daytonmsg2k3.AERO.BALL.COM>
On Thursday 09 November 2006 14:56, Todd, Charles wrote:
> If I'm reading this correctly, you're telling me that the 1.0.14 auditd
> that ships with RHEL4u3 is immature, at best.
No, you are misparsing the problem...he is trying to use that version of audit
with plain vanilla linux kernels. When paired with our kernel all is well.
> Does this mean that I will never get support for the dispatcher directive
> in /etc/auditd.conf?
I just about have 1.0.15 finished and it will have the dispatcher interface +
some backported code around the time start/end directives and various
bugfixes discovered during the LSPP work for RHEL5.
> I was hoping to use the development Snare scripts that Leigh put together,
> mainly for a unified, centralization of our audit trails, but it doesn't
> work if the dispatcher support option is missing.
U5 it should be there.
-Steve
next prev parent reply other threads:[~2006-11-13 14:19 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-11-09 19:56 Audit-1.0.14 Todd, Charles
2006-11-13 14:19 ` Steve Grubb [this message]
2006-11-14 4:17 ` Audit-1.0.14 Todd, Charles
-- strict thread matches above, loose matches on Subject: below --
2006-10-11 11:49 Audit-1.0.14 Boyce, Kevin P. (Melbourne, FL)
2006-10-11 12:24 ` Audit-1.0.14 Steve Grubb
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200611130919.44418.sgrubb@redhat.com \
--to=sgrubb@redhat.com \
--cc=CTODD@ball.com \
--cc=linux-audit@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox