Linux audit for Debian

[Michael Fecina]

All,

I've been on this list for quite some time trying to keep track of an
'inherent' (kernel based) auditing capability to meet NISPOM requirements.
It seems you guys are there (and have been) for a while.

I understand that the distribution used is Redhat, and given this Debian
topic, I'd like to ask what the major changes would be to make this
available in Debian.  A kernel patch, some header changes, and the client
(user-space) tools?  Am I missing anything big?

Thanks,
Mike 

-----Original Message-----
From: linux-audit-bounces at redhat.com [mailto:linux-audit-bounces at redhat.com]
On Behalf Of Steve Grubb
Sent: Tuesday, February 21, 2006 11:36 AM
To: Mauricio Lin
Cc: linux-audit at redhat.com
Subject: Re: Linux audit for Debian

On Tuesday 21 February 2006 11:09, Mauricio Lin wrote:
> > > In file included from /usr/include/linux/sched.h:12,  from 
> > >/usr/include/linux/audit.h:27,  from libaudit.h:35,
> > >/usr/include/linux/jiffies.h:84: error: syntax error before
'jiffies_64'
> > >/usr/include/linux/jiffies.h:88: error: syntax error before
> >
> > 'get_jiffies_64'
> >
> > Sounds like a problem in the kernel headers. Probably a missing include.
>
> Do you mean the jiffies.h or sched.h or audit.h is missing an include?

jiffies.h is where all the errors are, so its the one that is probably
missing the include. I have no idea what include it needs, but it seems to
be something that defines a common type.

-Steve

--
Linux-audit mailing list
Linux-audit at redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit