topic Re: How to enable audit on Red Hat Linux? in Operating System - Linux

How to enable audit on Red Hat Linux?

Kenneth Leung_2 — Tue, 19 Apr 2005 21:57:32 GMT

I would like to know how to enable system security audit on Red Hat Linux? Please help. Thanks a lot.

Re: How to enable audit on Red Hat Linux?

Dave Falloon — Wed, 20 Apr 2005 10:18:36 GMT

I would use nessus (http://www.nessus.org/). This is an automated penetration test it will attempt to crack into a system through its network systems. I've only used it over the network, I'm not sure that it works any other way.

What are you auditing? Are you looking for specific instances of system breaches or general errors in security?

--Dave

Re: How to enable audit on Red Hat Linux?

Srikanth A_1 — Wed, 20 Apr 2005 10:53:16 GMT

If you are looking for system auditing on who is doing and what on the system then try
http://rpmfind.net/linux/RPM/suse/8.2/i386/suse/i586/acct-6.3.5-472.i586.html

Re: How to enable audit on Red Hat Linux?

Vitaly Karasik_1 — Thu, 21 Apr 2005 04:45:05 GMT

Are you speaking about RHEL auditing subsystem?
If so, you should check
man 7 laus
and
Release Notes for RHEL3 update 3

As far as I remember, audit is up by default.