audit-0.6.7 released

Chris Wright chrisw at osdl.org
Thu Mar 10 22:12:23 UTC 2005


* Steve Grubb (sgrubb at redhat.com) wrote:
> On Thursday 10 March 2005 15:55, Debora Velarde wrote:
> > But I'm not sure that enabled really is 1.  Because if you start adding
> > rules and executing syscalls, the audit records go to /var/log/messages
> > instead of /var/log/audit.log.
> 
> This sounds like the kernel bug that I was chasing over the weekend. What 
> kernel are you using? I'm using the latest from the yum repo (I think .11) 
> and don't see this problem.

I think I missed that one, but it's fixed?

thanks,
-chris
-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net




More information about the Linux-audit mailing list