RE: Linux-audit Digest, Vol 27, Issue 2

Thomas, Daniel J.
2006-12-11T17:15:21Z

I'm new to the audit subsystem. I need to get it working well under
RHEL4. The version that comes with Redhat is very old (1.0.14?) I
noticed if I upgrade to 1.0.14 it pretty much works the same, but if I
upgrade all the way to 1.3.1, file watch functionality has been removed.
How do I handle auditing of access to security files with 1.3? I assume
it's some kind of system call we're tracking, but I don't know how to
get a list of system calls that I need to know about.

Thanks,

-Dan Thomas

-----Original Message-----
From: linux-audit-bounces@redhat.com
[mailto:linux-audit-bounces@redhat.com] On Behalf Of
linux-audit-request@redhat.com
Sent: Monday, December 11, 2006 12:00 PM
To: linux-audit@redhat.com
Subject: Linux-audit Digest, Vol 27, Issue 2

Send Linux-audit mailing list submissions to
linux-audit@redhat.com

To subscribe or unsubscribe via the World Wide Web, visit
https://www.redhat.com/mailman/listinfo/linux-audit
or, via email, send a message with subject or body 'help' to
linux-audit-request@redhat.com

You can reach the person managing the list at
linux-audit-owner@redhat.com

When replying, please edit your Subject line so it is more specific than
"Re: Contents of Linux-audit digest..."

Today's Topics:

1. audit 1.3.1 released (Steve Grubb)

----------------------------------------------------------------------

Message: 1
Date: Mon, 11 Dec 2006 11:05:33 -0500
From: Steve Grubb <sgrubb@redhat.com>
Subject: audit 1.3.1 released
To: Linux Audit <linux-audit@redhat.com>
Message-ID: <200612111105.33708.sgrubb@redhat.com>
Content-Type: text/plain; charset="us-ascii"

Hi,

I've just released a new version of the audit daemon. It can be
downloaded from http://people.redhat.com/sgrubb/audit It will also be
in rawhide tomorrow. The Changelog is:

- Fix a couple parsing problems (#217952)
- Add tgkill to S390* syscall tables (#218484)
- Fix error messages in ausearch/aureport command options

Please let me know if there are any problems with this release.

-Steve

------------------------------

--
Linux-audit mailing list
Linux-audit@redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit

End of Linux-audit Digest, Vol 27, Issue 2
******************************************