I'm new to the audit subsystem. I need to get it working well under RHEL4. The version that comes with Redhat is very old (1.0.14?) I noticed if I upgrade to 1.0.14 it pretty much works the same, but if I upgrade all the way to 1.3.1, file watch functionality has been removed. How do I handle auditing of access to security files with 1.3? I assume it's some kind of system call we're tracking, but I don't know how to get a list of system calls that I need to know about.
Thanks, -Dan Thomas -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, December 11, 2006 12:00 PM To: [email protected] Subject: Linux-audit Digest, Vol 27, Issue 2 Send Linux-audit mailing list submissions to [email protected] To subscribe or unsubscribe via the World Wide Web, visit https://www.redhat.com/mailman/listinfo/linux-audit or, via email, send a message with subject or body 'help' to [EMAIL PROTECTED] You can reach the person managing the list at [EMAIL PROTECTED] When replying, please edit your Subject line so it is more specific than "Re: Contents of Linux-audit digest..." Today's Topics: 1. audit 1.3.1 released (Steve Grubb) ---------------------------------------------------------------------- Message: 1 Date: Mon, 11 Dec 2006 11:05:33 -0500 From: Steve Grubb <[EMAIL PROTECTED]> Subject: audit 1.3.1 released To: Linux Audit <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="us-ascii" Hi, I've just released a new version of the audit daemon. It can be downloaded from http://people.redhat.com/sgrubb/audit It will also be in rawhide tomorrow. The Changelog is: - Fix a couple parsing problems (#217952) - Add tgkill to S390* syscall tables (#218484) - Fix error messages in ausearch/aureport command options Please let me know if there are any problems with this release. -Steve ------------------------------ -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit End of Linux-audit Digest, Vol 27, Issue 2 ****************************************** -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
