<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN"> <HTML> <HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8"> <META NAME="GENERATOR" CONTENT="GtkHTML/3.12.2"> </HEAD> <BODY> I would download the source rpms, make your changes, change the version, and use the "rpm -Uhv" to upgrade existing packages. Kevin Boyce Northrop Grumman Corp. On Fri, 2007-11-16 at 10:54 -0500, Bill Tangren wrote: <BLOCKQUOTE TYPE=CITE> <PRE> I'm running RHEL ES 4 servers, and am having difficulty with aureport. I'm using audit version 1.0.15-3, the one that comes with the OS. The problem is that I need daily reports, and it is not doing it. The reports always cover the entire range of available logs (sometimes gigabytes of data). The reports can take a LONG time to compile, and it doesn't give me the daily snapshot I need. I'm thinking of installing the latest tarball and compiling, as I understand more recent versions of aureport have implemented time limits. [I've emailed this list before about this.] My question now is, is it possible to uninstall the prepackaged audit and audit-lib, and install the latest from source, without seriously hosing my system? TIA, </PRE> </BLOCKQUOTE> </BODY> </HTML>