* Audit Dispatcher
@ 2008-02-25 20:56 Kevin Boyce
2008-02-25 21:05 ` Steve Grubb
0 siblings, 1 reply; 2+ messages in thread
From: Kevin Boyce @ 2008-02-25 20:56 UTC (permalink / raw)
To: linux-audit
[-- Attachment #1.1: Type: text/plain, Size: 123 bytes --]
All,
Is there any recommended audit dispatcher for the the RHEL audit daemon?
Thanks,
Kevin Boyce
Northrop Grumman Corp.
[-- Attachment #1.2: Type: text/html, Size: 376 bytes --]
[-- Attachment #2: Type: text/plain, Size: 0 bytes --]
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Audit Dispatcher
2008-02-25 20:56 Audit Dispatcher Kevin Boyce
@ 2008-02-25 21:05 ` Steve Grubb
0 siblings, 0 replies; 2+ messages in thread
From: Steve Grubb @ 2008-02-25 21:05 UTC (permalink / raw)
To: linux-audit, kevin.boyce
On Monday 25 February 2008 15:56:15 Kevin Boyce wrote:
> Is there any recommended audit dispatcher for the the RHEL audit daemon?
In the 5.2 update we are switching from the python based dispatcher (audit
1.4.1 era) to an improved C based multi-threaded dispatcher (roughly current
with 1.6.8's). I will probably be backporting the same dispatcher to RHEL4.7.
There very well could be other 3rd party dispatchers out there, but I don't
know where you would find them and I have not tested them. Also, the
dispatcher needs SE Linux policy updates since auditd_t is a confined domain.
So, a third party dispatcher has that hurdle to jump over, too.
-Steve
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2008-02-25 21:05 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-02-25 20:56 Audit Dispatcher Kevin Boyce
2008-02-25 21:05 ` Steve Grubb
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox