From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: excluding auditd events Date: Thu, 26 May 2011 10:33:11 -0400 Message-ID: <201105261033.11536.sgrubb@redhat.com> References: <4DDD9D3E.8020001@googlemail.com> <201105261016.13760.sgrubb@redhat.com> <4DDE624D.6010405@googlemail.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <4DDE624D.6010405@googlemail.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Mr Dash Four Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Thursday, May 26, 2011 10:23:09 AM Mr Dash Four wrote: > > Sort of. We have kerberos support, but its not enabled at the moment. The > > reason being is that the kerberos libraries were in /usr/lib64 which is > > a big problem if the audit system started before the nfs components (and > > it does). I think the kerberos libraries might have been moved so we > > could potentially turn that on sometime soon - but I have not been > > updating or testing the code. If you build your own packages, you can > > turn it on now. > > Thanks, I'll try as soon as I am able to build a decent version of the > daemon (as I already pointed out - the show-stopper for me is the older > version of perl on my FC13 system, which, from what I remember, is a > dependency for building the remote-logging part of the daemon). The audit package has no dependency on perl. -Steve