Re: audit 1.2.2 released
Is it possible to make auditd compilable to vanilla kernel 2.6.12?
That makes auditd easier to use.
Xin
On 5/22/06, Steve Grubb <sgrubb(a)redhat.com> wrote:
On Tuesday 16 May 2006 13:23, Steve Grubb wrote:
> AFAICT, there are 2 places where an access decision is made,
> audit_netlink_ok in kernel/audit.c. And the other place is
> selinux_nlmsg_lookup in security/selinux/nlmsgtab.c. I think you'd want to
> patch your kernel to printk its access decision results in both of those
> functions. That should tell us something about what's going on.
Mike,
Did you ever patch your kernel to get more info or did this problem go away in
the latest kernel (lspp.26)?
-Steve
--
Linux-audit mailing list
Linux-audit(a)redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit