setting up auditd

[Steve Grubb]

On Tuesday 06 March 2007 15:51, geckiv wrote:
> I have a RH Rel 4 system and it does not seem to be setup to run auditd (ok
> rpm reveals audit-0.5-1. but config file and  device files non
> existent).

audit-0.5-1 is known not to work at all. You should upgrade to the latest in 
RHEL4, which is 1.0.14. You will need to install the audit-libs-devel package 
and you should have man pages for the API.

-Steve