On 3/6/07, geckiv <[EMAIL PROTECTED]> wrote:
Well I have a few problems and I can't find any good references on the net on how to do this. I have a RH Rel 4 system and it does not seem to be setup to run auditd (ok rpm reveals audit-0.5-1. but config file and device files non existent). And once i have that running I want to be able to have my own application write to the auditd . I understand audit-libs is required for that but have been unable to find it nor a procedure on how ot use it. I found some tid bits but they seem Rel 3 related.
If you have audit-0.5 on the system.. it is probably not updated in a long time. Getting the system updated via RHN is your first step. After that.. getting it configured with audit is a later concern. -- Stephen J Smoogen. -- CSIRT/Linux System Administrator How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice" -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
