Auditing in old versions of Linux

[Woodie, Paul E, CIV, DSS]

There is an audit package called Snare, which would make possible
auditing on previous versions of linux.  It worked well.  Unfortunately,
that also required (usually) modified versions of the kernel.  Perhaps
you can find some of those components.  I have not used Snare in quite a
while. 


Paul Woodie, CISSP, IAM

-----Original Message-----
From: linux-audit-bounces at redhat.com
[mailto:linux-audit-bounces at redhat.com] On Behalf Of
linux-audit-request at redhat.com
Sent: Tuesday, March 30, 2010 12:00 PM
To: linux-audit at redhat.com
Subject: Linux-audit Digest, Vol 66, Issue 12
Importance: Low

Send Linux-audit mailing list submissions to
	linux-audit at redhat.com

To subscribe or unsubscribe via the World Wide Web, visit
	https://www.redhat.com/mailman/listinfo/linux-audit
or, via email, send a message with subject or body 'help' to
	linux-audit-request at redhat.com

You can reach the person managing the list at
	linux-audit-owner at redhat.com

When replying, please edit your Subject line so it is more specific than
"Re: Contents of Linux-audit digest..."


Today's Topics:

   1. Auditing in old versions of Linux (Mario Chancay)


----------------------------------------------------------------------

Message: 1
Date: Tue, 30 Mar 2010 08:32:35 -0700 (PDT)
From: Mario Chancay <mario.chancay at yahoo.com>
To: linux-audit at redhat.com
Subject: Auditing in old versions of Linux
Message-ID: <27921.42909.qm at web45214.mail.sp1.yahoo.com>
Content-Type: text/plain; charset="us-ascii"

Due to technical and budget constrains, we are not yet able to migrate
some old linux boxes to the latest versions but need to configure
auditing under the following platforms :

- Red Hat Linux Enterprise AS 3.4, 3.5, 3.6
- Red Hat Linux 4.x

Need advice to confirm if auditing is possible under this versions and
also the recommended procedure to install/setup as I understand that the
auditd package depends on the kernel version. 

Regards

Mario 


      
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<https://www.redhat.com/archives/linux-audit/attachments/20100330/875002
02/attachment.html>

------------------------------

--
Linux-audit mailing list
Linux-audit at redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit

End of Linux-audit Digest, Vol 66, Issue 12
*******************************************