Linux audit for Debian

[Mauricio Lin]

Hi all,

I managed to build the syscall auditing tool on my Debian system.

Basically I downloded the glibc-kernheaders-3.0-5.2.i386.rpm from
ftp://rpmfind.net/linux/fedora/core/development/i386/Fedora/RPMS/glibc-kernheaders-3.0-5.2.i386.rpmand
I converted it to tgz format as:

# alien -t glibc-kernheaders-3.0-5.2.i386.rpm

Afterwards the glibc-kernheaders-3.0.tgz is generated in your current
directory.

You can extract it in your current directory as:

# tar xzvf glibc-kernheaders-3.0.tgz

the extracted files are located in ./usr/include/ (under you current
directory).  There are 3 directories under ./usr/include, so copy them
manually to /usr/local/include/ (system directory).

Assuming you are under the directory you extracted the tgz file, do
something like:

cp -r usr/include/* /usr/local/include (Do not confuse with your system
/usr/include)

Now the 'make' can be done normally.

BR,

Mauricio Lin.

On 2/21/06, Steve Grubb <sgrubb at redhat.com> wrote:
>
> On Tuesday 21 February 2006 17:19, Mauricio Lin wrote:
> > BTW, Is there any restriction about the version of kernel headers?
>
> Usually the kernel headers that user space uses are "sanitized" kernel
> headers
> and not the kernel's copy. For us, they are in the glibc-kernheaders
> package.
> I do not know how Debian does it...maybe someone else can help you.
>
> -Steve
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20060222/b6dcd228/attachment.htm>