FS#12584 - Auditing in kernel26

Attached to Project: Arch Linux
Opened by Connor Behan (connorbehan) - Saturday, 27 December 2008, 06:45 GMT
Last edited by Tobias Powalowski (tpowa) - Thursday, 12 March 2009, 17:39 GMT
Task Type Feature Request
Category Kernel
Status Closed
Assigned To Tobias Powalowski (tpowa)
Thomas Bächler (brain0)
Architecture All
Severity Low
Priority Normal
Reported Version None
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Description:
The kernel config says CONFIG_AUDIT is not set. I need CONFIG_AUDIT=y to get auditd to work (I have a PKGBUILD all ready to go). If you don't want to do this, could someone suggest another program that can watch a particular file and tell me exactly which process edits it and when (inotify-tools, lsof and glsof don't give enough info)? Thanks.

Additional info:
* 2.6.27.8
This task depends upon

Closed by  Tobias Powalowski (tpowa)
Thursday, 12 March 2009, 17:39 GMT
Reason for closing:  Implemented
Additional comments about closing:  2.6.28.7-2

Loading...