Re: Newbie: How to use auditd?
You should just install the latest rpm from rawhide. Then:
Tweek /etc/auditd.conf to your liking
chkconfig --add auditd
service auditd start
This is it. Thank you for your info! I was using auditd-0.5-1.src.rpm
(I thought I downloaded it a couple of days ago) it didn't include
config files.
I just downloaded audit-0.5.6-1.src.rpm and tested it... It worked!
Thanks!
-- Junji Kanemaru
Linuon Inc.
Tokyo Japan