On Monday 22 May 2006 15:15, Xin Zhao wrote:
Is it possible to make auditd compilable to vanilla kernel 2.6.12?
That makes auditd easier to use.
You should be able to use audit-1.0.14 with that kernel. The only issue you
may run into is kernel headers for linux/audit.h. But it should work.
Auditing was not really stable, though, until the 2.6.14 kernel.
-Steve