* Can one compile the lastest ausearch (from 2.4) and just deploy that resultant binary on a RHEL 5 or 6 system
@ 2014-09-03 10:36 Burn Alting
2014-09-03 12:47 ` Steve Grubb
0 siblings, 1 reply; 3+ messages in thread
From: Burn Alting @ 2014-09-03 10:36 UTC (permalink / raw)
To: linux-audit
Hi All,
I would like to be able to use some of the recent enhancements to
ausearch on old RHEL/Centos releases (5.X, 6.X) if that's possible.
Can I safely achieve this? I realise I would have to hand craft the
compilation of ausearch, say within the 2.4 release, but am I going to
come across other issues?
Regards
Burn
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Can one compile the lastest ausearch (from 2.4) and just deploy that resultant binary on a RHEL 5 or 6 system
2014-09-03 10:36 Can one compile the lastest ausearch (from 2.4) and just deploy that resultant binary on a RHEL 5 or 6 system Burn Alting
@ 2014-09-03 12:47 ` Steve Grubb
2014-09-03 13:32 ` Burn Alting
0 siblings, 1 reply; 3+ messages in thread
From: Steve Grubb @ 2014-09-03 12:47 UTC (permalink / raw)
To: linux-audit, burn
On Wednesday, September 03, 2014 08:36:23 PM Burn Alting wrote:
> I would like to be able to use some of the recent enhancements to
> ausearch on old RHEL/Centos releases (5.X, 6.X) if that's possible.
>
> Can I safely achieve this?
On RHEL6, yes. RHEL5...no. There is an ABI difference between RHEL5 and 6 in
libaudit. There are functions that RHEL5 uses that are deprecated on RHEL6.
This is the reason that there is a 1.8 branch in svn.
> I realise I would have to hand craft the compilation of ausearch, say within
> the 2.4 release, but am I going to come across other issues?
Unfortunately, yes you will have significant issues on RHEL5. That said, RHEL6
should be easy. Just use a RHEL6 audit.spec file as your starting point.
-Steve
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Can one compile the lastest ausearch (from 2.4) and just deploy that resultant binary on a RHEL 5 or 6 system
2014-09-03 12:47 ` Steve Grubb
@ 2014-09-03 13:32 ` Burn Alting
0 siblings, 0 replies; 3+ messages in thread
From: Burn Alting @ 2014-09-03 13:32 UTC (permalink / raw)
To: Steve Grubb; +Cc: linux-audit
Thanks Steve.
Rgds
Burn
On Wed, 2014-09-03 at 08:47 -0400, Steve Grubb wrote:
> On Wednesday, September 03, 2014 08:36:23 PM Burn Alting wrote:
> > I would like to be able to use some of the recent enhancements to
> > ausearch on old RHEL/Centos releases (5.X, 6.X) if that's possible.
> >
> > Can I safely achieve this?
>
> On RHEL6, yes. RHEL5...no. There is an ABI difference between RHEL5 and 6 in
> libaudit. There are functions that RHEL5 uses that are deprecated on RHEL6.
> This is the reason that there is a 1.8 branch in svn.
>
>
> > I realise I would have to hand craft the compilation of ausearch, say within
> > the 2.4 release, but am I going to come across other issues?
>
> Unfortunately, yes you will have significant issues on RHEL5. That said, RHEL6
> should be easy. Just use a RHEL6 audit.spec file as your starting point.
>
> -Steve
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2014-09-03 13:32 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-09-03 10:36 Can one compile the lastest ausearch (from 2.4) and just deploy that resultant binary on a RHEL 5 or 6 system Burn Alting
2014-09-03 12:47 ` Steve Grubb
2014-09-03 13:32 ` Burn Alting
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox