Latest Audit on RHEL 5.2
- First Post
- Replies
- Stats
-
Go to
- ----- 2025 -----
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2006 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2005 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2004 -----
- December
- November
- October
- September
- August
Greetings,
I have some systems with RHEL 5.2 (a server and three workstations) that I'd like to
put the latest audit software on to put me on the path of getting NISPOM approval. My plan
is to get to the point that I will have prelude running with information display via
Prewikka.
1) I have read the HowTo at http://people.redhat.com/sgrubb/audit/prelude.txt but it seems
rather old as it talks about audit 1.6.6 to 1.6.7 upgrading and updates to come after
things have been checked out. Does anyone have any updates to this procedure that will be
helpful?
2) The pre-reqs for audit-1.7.9-1.src.rpm says it needs glibc-kernheaders >= 3.0-14. I
must not understand what this is asking for. Is this some kind of abbreviation? Where can
I find this?
Any thoughts anyone has that might help me on my path will be greatly appreciated. There
doesn't seem to be any way to search the archives of this mailing list. Is that
correct or have I missed something?
Dan Gruhn
On Wednesday 12 November 2008 11:16:26 Dan Gruhn wrote:
1) I have read the HowTo at
http://people.redhat.com/sgrubb/audit/prelude.txt but it seems rather old
as it talks about audit 1.6.6 to 1.6.7 upgrading
This is a particular warning for anyone that ever installed and used the audit
1.6.6 prelude plugin because the name of the sensor being registered was
changed at the prelude developer's request. If you never installed that
version, then that note doesn't apply to you. I updated the text to hopefully
make that more plain.
I also added a new Deployment Tips section to explain a little about
maintaining & tuning the setup.
and updates to come after things have been checked out. Does anyone
have
any updates to this procedure that will be helpful?
The update I need to make to the text was that we assigned a new UID/GID pair
to prelude out of the pool of UIDs reserved for daemons. I think the Fedora
10 prelude packages create that user if it doesn't exist. But since Fedora 10
is not shipping yet, I haven't spent the time testing out the new UID/GID
pair. I just wanted to get it reserved since that is a much longer process
requiring coordination with other groups inside Red Hat.
2) The pre-reqs for audit-1.7.9-1.src.rpm says it needs
glibc-kernheaders
>= 3.0-14. I must not understand what this is asking for. Is this some kind
of abbreviation? Where can I find this?
This is the kernel headers shipped with the 2.6 kernel. RHEL5 is OK. RHEL4 is
not.
-Steve
5890
days inactive
423
days old
linux-audit@lists.linux-audit.osci.io
1 comments
2 participants
tags (0)
participants (2)
-
Dan Gruhn -
Steve Grubb