<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2873" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Hi,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2> I have a Linux
system running a 2.6.5 kernel, which cannot be upgraded to a
later</FONT></DIV>
<DIV><FONT face=Arial size=2>release for the time being. I do have
the source available, and can patch it if necessary.</FONT></DIV>
<DIV><FONT face=Arial size=2>I wish to run some kind of system call level
auditing/logging for security purposes. I have</FONT></DIV>
<DIV><FONT face=Arial size=2>the LaUS package </FONT><FONT face=Arial
size=2>installed with the PAM modules, but this does not impliment the
system</FONT></DIV>
<DIV><FONT face=Arial size=2>call level </FONT><FONT face=Arial
size=2>logging that I require, without a patch. The trouble is that
the only patches that I can</FONT></DIV>
<DIV><FONT face=Arial size=2>find are not compatible with this particular
kernel. </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Looking at other options, it appears
that syscalltrace is no longer being developed ?. </FONT></DIV>
<DIV><FONT face=Arial size=2>It doesn't appear for the 2.6 kernels, and
LSM again looks only good to 2.5 kernels.</FONT></DIV>
<DIV><FONT face=Arial size=2>The only other thing that I can find is
ptrace, but has to be explicity run under each</FONT></DIV>
<DIV><FONT face=Arial size=2>executable ?.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>What are my options here ?. </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks in advance,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2> Adrian.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV></BODY></HTML>