RE: auditd
"Hubert Cross" <[email protected]>
| Newsgroups | gmane.linux.redhat.rhn.user |
|---|---|
| Message-ID | <3C9EF11B3FD96D43B02C92C6C44291D0028A4627@aasv2415w2k3e.analogictech.com> |
Sorry about that typo. I renamed the link /etc/rc5.d/K87auditd to /etc/rc5.d/S87auditd. That's K to S. Hubert Cross CAD Assistant Advanced Analogic Technologies, Inc. Email[[email protected]] Work[(408)737-4617] Cell[(408)419-4228] -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Hubert Cross Sent: Thursday, September 20, 2007 2:21 PM To: Discussions about Red Hat Network (rhn.redhat.com) Subject: RE: [rhn-users] auditd All I had to do was enable it in /etc/rc5.d by changing the K to and A in the auditd link. The logs will be in /var/log/audit. Hope this helps Hubert Cross CAD Assistant Advanced Analogic Technologies, Inc. Email[[email protected]] Work[(408)737-4617] Cell[(408)419-4228] -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Lennart Andersen Sent: Wednesday, September 19, 2007 12:37 PM To: RHN Users Subject: [rhn-users] auditd Hi All, Can anyone point me in the right direction in how to set up auditd on a RHEL 4 update 4 box. Can I monitor just files or directories? If so what are the rules to do this. Or if someone has a document that outlines this procedure. Regards, -- Lennart Andersen St Thomas, Ontario lka0871 at rogers dot com ---------------------------- _______________________________________________ rhn-users mailing list [email protected] https://www.redhat.com/mailman/listinfo/rhn-users _______________________________________________ rhn-users mailing list [email protected] https://www.redhat.com/mailman/listinfo/rhn-users