From mboxrd@z Thu Jan 1 00:00:00 1970 From: geckiv Subject: Re: setting up auditd Date: Wed, 07 Mar 2007 10:47:37 -0500 Message-ID: <45EEDE99.6010503@optonline.net> References: <45EDD443.8020408@optonline.net> <200703061601.09438.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1545683103==" Return-path: In-reply-to: <200703061601.09438.sgrubb@redhat.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Steve Grubb Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com This is a multi-part message in MIME format. --===============1545683103== Content-type: multipart/alternative; boundary="Boundary_(ID_msWnAE18s5IjiaBJoIJjJA)" This is a multi-part message in MIME format. --Boundary_(ID_msWnAE18s5IjiaBJoIJjJA) Content-type: text/plain; charset=us-ascii; format=flowed Content-transfer-encoding: 7BIT I guess the only way to get that is to have a RH subscription? Steve Grubb wrote: >On Tuesday 06 March 2007 15:51, geckiv wrote: > > >>I have a RH Rel 4 system and it does not seem to be setup to run auditd (ok >>rpm reveals audit-0.5-1. but config file and device files non >>existent). >> >> > >audit-0.5-1 is known not to work at all. You should upgrade to the latest in >RHEL4, which is 1.0.14. You will need to install the audit-libs-devel package >and you should have man pages for the API. > >-Steve > > > > --Boundary_(ID_msWnAE18s5IjiaBJoIJjJA) Content-type: text/html; charset=us-ascii Content-transfer-encoding: 7BIT I guess the only way to get that is to have a RH subscription?

Steve Grubb wrote:

On Tuesday 06 March 2007 15:51, geckiv wrote:

I have a RH Rel 4 system and it does not seem to be setup to run auditd (ok
rpm reveals audit-0.5-1. but config file and  device files non
existent).


audit-0.5-1 is known not to work at all. You should upgrade to the latest in 
RHEL4, which is 1.0.14. You will need to install the audit-libs-devel package 
and you should have man pages for the API.

-Steve

--Boundary_(ID_msWnAE18s5IjiaBJoIJjJA)-- --===============1545683103== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============1545683103==--