From mboxrd@z Thu Jan  1 00:00:00 1970
From: Steve Grubb <sgrubb@redhat.com>
Subject: Re: Login/Logouts (UNCLASSIFIED)
Date: Thu, 1 Mar 2007 09:05:10 -0500
Message-ID: <200703010905.10214.sgrubb@redhat.com>
References: <C20B7106.968%paul.whitney@mac.com>
	<200702281754.28780.sgrubb@redhat.com>
	<5B93875C42278C43A32F0BEB91CEABBB015C9CCB@laccadive.disanet.disa-u.mil>
Mime-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <5B93875C42278C43A32F0BEB91CEABBB015C9CCB@laccadive.disanet.disa-u.mil>
Content-Disposition: inline
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: "Mackanick, Jason W CTR DISA GIG-OP" <jason.mackanick.ctr@disa.mil>
Cc: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

On Thursday 01 March 2007 08:41, Mackanick, Jason W CTR DISA GIG-OP wrote=
:
> I am running the standard auditd delivered with rhel4. =A0What is the
> latest set of rpm's that I should have to see the login functionality?

It was delivered in the RHEL4U3 set (audit, pam, login, openssh, gdm). I =
would=20
recommend using RHELU4 audit package (audit-1.0.14) and the latest errata=
=20
RHEL4 kernel (released this week) as well since it has an important audit=
=20
fix.

-Steve