Removing open_by_handle_at in local copy of stig.rules
- First Post
- Replies
- Stats
-
Go to
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2006 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2005 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2004 -----
- December
- November
- October
- September
- August
As much as I'd like to be on a more current kernel, the open_by_handle_at
syscall seems to have been introduced in 2.6.39, per para 1.9 of:
http://kernelnewbies.org/Linux_2_6_39
I removed it from my local copy of:
https://fedorahosted.org/audit/browser/trunk/contrib/stig.rules
My old RHEL 5 boxes are easily confused with this new-fangled stuff! :)
Is there a plan to have a RHEL 5 and RHEL 6 version of the stig.rules?
Leam
--
Mind on a Mission <http://leamhall.blogspot.com/>
Attachments:
- attachment.html (text/html — 854 bytes)
On Monday, November 04, 2013 08:55:16 AM leam hall wrote:
As much as I'd like to be on a more current kernel, the
open_by_handle_at
syscall seems to have been introduced in 2.6.39, per para 1.9 of:
http://kernelnewbies.org/Linux_2_6_39
I removed it from my local copy of:
https://fedorahosted.org/audit/browser/trunk/contrib/stig.rules
My old RHEL 5 boxes are easily confused with this new-fangled stuff! :)
You would have to have an auditctl that matched it.
Is there a plan to have a RHEL 5 and RHEL 6 version of the
stig.rules?
I think they are pretty well separated. The rules shipped in rhel5 I think are
current with the requirements levied on RHEL5. RHEL6 just got a STIG and I
have not yet reviewed it to see if they stuck to the agreement we had. But the
rules that would apply to RHEL6 would be shipped on RHEL6. I had not planned
to separate them in svn.
-Steve
4066
days inactive
4066
days old
linux-audit@lists.linux-audit.osci.io
1 comments
2 participants
tags (0)
participants (2)
-
leam hall -
Steve Grubb