From mboxrd@z Thu Jan 1 00:00:00 1970 From: geckiv Subject: setting up auditd Date: Tue, 06 Mar 2007 15:27:18 -0500 Message-ID: <45EDCEA6.8050409@optonline.net> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7BIT Return-path: Received: from mx1.redhat.com (mx1.redhat.com [172.16.48.31]) by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id l26Lu37w012072 for ; Tue, 6 Mar 2007 16:56:03 -0500 Received: from mta3.srv.hcvlny.cv.net (mta3.srv.hcvlny.cv.net [167.206.4.198]) by mx1.redhat.com (8.13.1/8.13.1) with ESMTP id l26LtvUE005656 for ; Tue, 6 Mar 2007 16:55:57 -0500 Received: from optonline.net (ool-4352b24e.dyn.optonline.net [67.82.178.78]) by mta3.srv.hcvlny.cv.net (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTP id <0JEI00AK00Q3SCD0@mta3.srv.hcvlny.cv.net> for linux-audit@redhat.com; Tue, 06 Mar 2007 15:25:17 -0500 (EST) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: "linux-audit@redhat.com" List-Id: linux-audit@redhat.com Well I have a few problems and I can't find any good references on the net on how to do this. I have a RH Rel 4 system and it does not seem to be setup to run auditd (ok rpm reveals audit-0.5-1. but config file and device files non existent). And once i have that running I want to be able to have my own application write to the auditd . I understand audit-libs is required for that but have been unable to find it nor a procedure on how ot use it. I found some tid bits but they seem Rel 3 related. Help!!! Thanks, Frank