Auditing in old versions of Linux
- First Post
- Replies
- Stats
-
Go to
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2006 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2005 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2004 -----
- December
- November
- October
- September
- August
Due to technical and budget constrains, we are not yet able to migrate some old linux
boxes to the latest versions but need to configure auditing under the following platforms
:
- Red Hat Linux Enterprise AS 3.4, 3.5, 3.6
- Red Hat Linux 4.x
Need advice to confirm if auditing is possible under this versions and also the
recommended procedure to install/setup as I understand that the auditd package depends on
the kernel version.
Regards
Mario
Attachments:
- attachment.html (text/html — 679 bytes)
You can use SNARE.
On 03/30/2010 11:32 AM, Mario Chancay wrote:
Due to technical and budget constrains, we are not yet able to
migrate
some old linux boxes to the latest versions but need to configure
auditing under the following platforms :
- Red Hat Linux Enterprise AS 3.4, 3.5, 3.6
- Red Hat Linux 4.x
Need advice to confirm if auditing is possible under this versions and
also the recommended procedure to install/setup as I understand that the
auditd package depends on the kernel version.
Regards
Mario
This e-mail and any files transmitted with it may be proprietary and are intended solely
for the use of the individual or entity to whom they are addressed. If you have received
this e-mail in error please notify the sender.
Please note that any views or opinions presented in this e-mail are solely those of the
author and do not necessarily represent those of ITT Corporation. The recipient should
check this e-mail and any attachments for the presence of viruses. ITT accepts no
liability for any damage caused by any virus transmitted by this e-mail.
On Tuesday 30 March 2010 11:32:35 am Mario Chancay wrote:
Due to technical and budget constrains, we are not yet able to
migrate some
old linux boxes to the latest versions but need to configure auditing
under the following platforms :
- Red Hat Linux Enterprise AS 3.4, 3.5, 3.6
- Red Hat Linux 4.x
Yes it is possible, but the auditing mechanisms are different. Both are common
criteria certified. One of the requirements for common criteria is auditing.
Need advice to confirm if auditing is possible under this versions
and also
the recommended procedure to install/setup as I understand that the auditd
package depends on the kernel version.
That is a longer topic. There are documents available in the cert rpm that may
be able to help answer how you should set it up.
ftp://ftp.redhat.com/pub/redhat/linux/eal/
-Steve
5380
days inactive
5380
days old
linux-audit@lists.linux-audit.osci.io
2 comments
3 participants
tags (0)
participants (3)
-
Mario Chancay -
Ray Pittigher -
Steve Grubb