RHELU4 versus RHELU5

[Kirkwood, David A.]

I was referring to the differences between RHEL update 4 and RHEL update
5 but the question is probably better posed as: Is the auditing used in
RHEL4 update 4 a dead end with respect to either RHEL4 update 5 or
RHEL5? The reason for the question is that I need to write some scripts
or graphical programs to tie some of the pieces together to construct
meaningful auditablity for disjoint items. If I have to do this all over
again, are the items going to be the same or completely different or
somewhat the same? I can use the system as it is now, but I would have
to run many ausearches and / or aureports with different parameters to
get the information I want. When I need to look at 10's of systems, it
is much easier to consolidate everything into a combined output and view
the whole thing. But if the auditing is going to change, I will delay
this part and put up with doing the systems individually until things
are stable. I'm not being a critic, just trying to allocate my time
efficiently.

Thanks, 

David A. Kirkwood
-----Original Message-----
From: linux-audit-bounces at redhat.com
[mailto:linux-audit-bounces at redhat.com] On Behalf Of Stephen Smalley
Sent: Thursday, February 08, 2007 11:39 AM
To: Kirkwood, David A.
Cc: linux-audit at redhat.com
Subject: Re: RHELU4 versus RHELU5

On Thu, 2007-02-08 at 11:34 -0500, Kirkwood, David A. wrote:
> I have not looked at the audit capability on RHELU5, but from the mail
> on this list I get a sense that it is, from the configuration and
> review tools significantly different that used in the previous
> release. First, Is this a correct assumption? I need to get approval
> to use systems and verify audit capabilities for those systems, but I
> don't want to have to go through the whole thing all over again.

Do you mean RHEL 4 vs. RHEL 5 (i.e. two successive releases of RHEL)? Or
RHEL 4 Update 4 vs. RHEL 4 Update 5 (i.e. two successive updates for
RHEL 4)?

-- 
Stephen Smalley
National Security Agency

--
Linux-audit mailing list
Linux-audit at redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit