How to enable audit on Red Hat Linux?

[Kenneth Leung_2]

I would like to know how to enable system security audit on Red Hat Linux? Please help. Thanks a lot.

[Dave Falloon]

I would use nessus (http://www.nessus.org/). This is an automated penetration test it will attempt to crack into a system through its network systems. I've only used it over the network, I'm not sure that it works any other way.

What are you auditing? Are you looking for specific instances of system breaches or general errors in security?

--Dave

[Srikanth A_1]

If you are looking for system auditing on who is doing and what on the system then try
http://rpmfind.net/linux/RPM/suse/8.2/i386/suse/i586/acct-6.3.5-472.i586.html

[Vitaly Karasik_1]

Are you speaking about RHEL auditing subsystem?
If so, you should check
man 7 laus
and
Release Notes for RHEL3 update 3

As far as I remember, audit is up by default.