Re: auditd
Aaron Bliss <[email protected]>
| Newsgroups | gmane.linux.redhat.rhn.user |
|---|---|
| Message-ID | <[email protected]> |
Deleting the K script will cause the daemon to be shut down improperly when the box is rebooted...To enable the daemon properly in redhat, you can use chkconfig chkconfig auditd on Aaron ----- Original Message ----- From: "Hubert Cross" <[email protected]> To: "Discussions about Red Hat Network (rhn.redhat.com)" <[email protected]> Sent: Thursday, September 20, 2007 5:22:13 PM (GMT-0500) America/New_York Subject: RE: [rhn-users] auditd Sorry about that typo. I renamed the link /etc/rc5.d/K87auditd to /etc/rc5.d/S87auditd. That's K to S. Hubert Cross CAD Assistant Advanced Analogic Technologies, Inc. Email[[email protected]] Work[(408)737-4617] Cell[(408)419-4228] -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Hubert Cross Sent: Thursday, September 20, 2007 2:21 PM To: Discussions about Red Hat Network (rhn.redhat.com) Subject: RE: [rhn-users] auditd All I had to do was enable it in /etc/rc5.d by changing the K to and A in the auditd link. The logs will be in /var/log/audit. Hope this helps Hubert Cross CAD Assistant Advanced Analogic Technologies, Inc. Email[[email protected]] Work[(408)737-4617] Cell[(408)419-4228] -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Lennart Andersen Sent: Wednesday, September 19, 2007 12:37 PM To: RHN Users Subject: [rhn-users] auditd Hi All, Can anyone point me in the right direction in how to set up auditd on a RHEL 4 update 4 box. Can I monitor just files or directories? If so what are the rules to do this. Or if someone has a document that outlines this procedure. Regards, -- Lennart Andersen St Thomas, Ontario lka0871 at rogers dot com ---------------------------- _______________________________________________ rhn-users mailing list [email protected] https://www.redhat.com/mailman/listinfo/rhn-users _______________________________________________ rhn-users mailing list [email protected] https://www.redhat.com/mailman/listinfo/rhn-users _______________________________________________ rhn-users mailing list [email protected] https://www.redhat.com/mailman/listinfo/rhn-users -- Aaron Bliss Systems Administrator SUNY Brockport (585) 395-2417