audit on Fedora Core 5

John D. Ramsdell ramsdell at mitre.org
Thu Mar 23 19:21:54 UTC 2006


Stephen Smalley <sds at tycho.nsa.gov> writes:

> I think audit was made optional in FC5 because of the overhead
> associated with syscall auditing, even if you aren't using any
> syscall audit filters.

I guess what I meant to say is I expected that audit would be install,
but the daemon not started by default.  In any event, yum install
audit, quickly resolved the problem for me.  To advert a flame war,
let's forget I mentioned emacs is not installed by default.

John




More information about the Linux-audit mailing list