Updating audit
I would like to update audit so that I can use the new "rule filterkey" feature. Can someone give me some direction in how to do this?
I am currently using:
Fedora Core 5
2.6.16-1.2212.2.8_FC6.lspp.34 kernel
audit-1.2.3-1Thank you,
Steve
Quoted 2 lines · Steve
I would like to update audit so that I can use the new "rule filterkey" feature. Can someone give me some direction in how to do this?
You can apply this patch:
https://www.redhat.com/archives/linux-audit/2006-June/msg00059.html
I have not tried it out yet and there's no guarantee that the auditctl options will be the same. I'll update the audit package eventually, but it won't be today. Sorry.
Quoted 3 lines
I am currently using:
Fedora Core 5
2.6.16-1.2212.2.8_FC6.lspp.34 kernel
You should be using lspp.37 at a minimum for this.
-Steve