Arch Linux

Please read this before reporting a bug:

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

FS#12584 - Auditing in kernel26

Attached to Project: Arch Linux
Opened by Connor Behan (connorbehan) - Saturday, 27 December 2008, 06:45 GMT
Last edited by Tobias Powalowski (tpowa) - Thursday, 12 March 2009, 17:39 GMT
Task Type Feature Request
Category Kernel
Status Closed
Assigned To Tobias Powalowski (tpowa)
Thomas B├Ąchler (brain0)
Architecture All
Severity Low
Priority Normal
Reported Version None
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No


The kernel config says CONFIG_AUDIT is not set. I need CONFIG_AUDIT=y to get auditd to work (I have a PKGBUILD all ready to go). If you don't want to do this, could someone suggest another program that can watch a particular file and tell me exactly which process edits it and when (inotify-tools, lsof and glsof don't give enough info)? Thanks.

Additional info:
This task depends upon

Closed by  Tobias Powalowski (tpowa)
Thursday, 12 March 2009, 17:39 GMT
Reason for closing:  Implemented
Additional comments about closing: