fedora-docs/release-notes fc4test3-relnotes,1.1,1.2

[Karsten Wade (kwade)]

Author: kwade

Update of /cvs/docs/fedora-docs/release-notes
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv19745

Modified Files:
	fc4test3-relnotes 
Log Message:
Release notes about audit daemon, changes to log locations, and enabling kernel auditing.


Index: fc4test3-relnotes
===================================================================
RCS file: /cvs/docs/fedora-docs/release-notes/fc4test3-relnotes,v
retrieving revision 1.1
retrieving revision 1.2
diff -u -r1.1 -r1.2
--- fc4test3-relnotes	3 May 2005 23:29:53 -0000	1.1
+++ fc4test3-relnotes	4 May 2005 01:12:29 -0000	1.2
@@ -72,9 +72,11 @@
 
 NOTE: Fedora Core is not a supported product of Red Hat, Inc.
 
-For more information, refer to the Fedora Project overview later in this document.
+For more information, refer to the Fedora Project overview later in
+this document.
 
-The following topics related to Fedora Core 4test3 are covered in this document:
+The following topics related to Fedora Core 4test3 are covered in this
+document:
 
     * Introduction (this section)
     * Hardware requirements
@@ -257,7 +259,8 @@
     standalone memory testing software to run. Memtest86 memory
     testing continues until the Esc key is pressed.
 
-NOTE: You must boot from CD-ROM 1 (or a rescue CD-ROM) in order to use this feature.
+NOTE: You must boot from CD-ROM 1 (or a rescue CD-ROM) in order to use
+this feature.
 
   * Fedora Core 4test3 supports graphical FTP and HTTP
     installations. However, due to the necessity of containing the
@@ -326,6 +329,30 @@
 
 This section contains information related to basic system components.
 
+auditd and log files
+
+The audit daemon, auditd, is now enabled by default.  When auditd is
+running, the kernel directs audit messages to
+/var/log/audit/audit.log.  The location of this file is specified in
+/etc/auditd.conf.
+
+AVC messages for SELinux are sent using the audit infrastructure.
+These messages are now in /var/log/audit/audit.log.
+
+When auditd is not running, the kernel passes audit messages to
+syslog.  These logs are typically kept in /var/log/messages and are
+viewable using dmesg.
+
+Audit extensions are now compiled into PAM.  All programs that do
+grant entry to the system or change user account attributes will
+generate an audit message.
+
+To enable auditing within the kernel, you must pass the parameter
+audit=1 to the kernel during boot.  Otherwise, you can use this
+command to enable auditing during run time:
+
+  'auditctl -e 1'
+
 slocate database
 
 The database needed by the locate utility is no longer created by default.
@@ -590,7 +617,8 @@
 must be aware that the steps necessary depend on which font subsystem
 is to use the new fonts. For the core X font subsystem, you must:
 
-1. Create the /usr/share/fonts/local/ directory (if it doesn't already exist):
+1. Create the /usr/share/fonts/local/ directory (if it doesn't already
+   exist):
 
 mkdir /usr/share/fonts/local/
 
@@ -654,6 +682,10 @@
 This section contains information related to packages that do not fit
 in any of the proceeding categories.
 
+  OpenOffice and upgrading test releases
+
+
+
 
 == Packages Added, Moved From Core, Changed, or Deprecated/Nuked ==
 
@@ -669,8 +701,8 @@
 
   * Packages that have a changed version since Fedora Core 3
   
-  * Packages that have been deprecated, and may be removed from a future
-    release of Fedora Core
+  * Packages that have been deprecated, and may be removed from a
+    future release of Fedora Core
 
 === Packages Added ===
 
@@ -966,7 +998,8 @@
 the larger projects may have their own channels as well; this
 information can be found on the project pages.
 
-NOTE: Red Hat has no control over the Fedora IRC channels or their content.
+NOTE: Red Hat has no control over the Fedora IRC channels or their
+content.
 
 ( x86 )