From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael C Thompson Subject: Re: File watches supported in Audit 1.1.5 on Fedora Core 5? Date: Tue, 20 Jun 2006 10:20:41 -0500 Message-ID: <44981249.8070203@us.ibm.com> References: <20060620005255.GA6986@arlut.utexas.edu> <200606192208.55652.sgrubb@redhat.com> <4497DF57.8010003@ornl.gov> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Return-path: Received: from mx1.redhat.com (mx1.redhat.com [172.16.48.31]) by int-mx1.corp.redhat.com (8.12.11.20060308/8.12.11) with ESMTP id k5KFL2rt016308 for ; Tue, 20 Jun 2006 11:21:02 -0400 Received: from e31.co.us.ibm.com (e31.co.us.ibm.com [32.97.110.149]) by mx1.redhat.com (8.12.11.20060308/8.12.11) with ESMTP id k5KFKxTc004154 for ; Tue, 20 Jun 2006 11:20:59 -0400 Received: from d03relay04.boulder.ibm.com (d03relay04.boulder.ibm.com [9.17.195.106]) by e31.co.us.ibm.com (8.12.11.20060308/8.12.11) with ESMTP id k5KFKroW000364 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Tue, 20 Jun 2006 11:20:53 -0400 Received: from d03av04.boulder.ibm.com (d03av04.boulder.ibm.com [9.17.195.170]) by d03relay04.boulder.ibm.com (8.13.6/NCO/VER7.0) with ESMTP id k5KFL2Wt095748 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Tue, 20 Jun 2006 09:21:02 -0600 Received: from d03av04.boulder.ibm.com (loopback [127.0.0.1]) by d03av04.boulder.ibm.com (8.12.11.20060308/8.13.3) with ESMTP id k5KFKplv023210 for ; Tue, 20 Jun 2006 09:20:52 -0600 In-Reply-To: <4497DF57.8010003@ornl.gov> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Steve Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com Steve wrote: >> install a lspp kernel and build a 1.2.x audit package for fc5. You >> should be set. > > This may be of use, I installed the lspp kernel and had to do the > following to get audit installed on FC5... > > Download the latest unifdef, glibc-kernheaders, and audit from: > http://mirrors.usc.edu/pub/linux/distributions/fedora/core/development/source/SRPMS/ > > > # rpmbuild --rebuild unifdef-*.src.rpm > # cd /usr/src/redhat/RPMS > # rpm -ivh unidef* > # cd - > # rpmbuild --rebuild glibc-kernheaders-*.src.rpm > # cd - > # rpm -Uvh glibc-kernheaders* > # cd - > # rpmbuild --rebuild audit-*.src.rpm > # cd - > # rpm -Uvh audit* > > Steve You can also install audit from rawhide, or "fedora-development.repo". This is a bit easier and has worked for me with minimal effort :) Just enable fedora-development.repo and yum install audit. Mike