LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Red Hat
User Name
Password
Red Hat This forum is for the discussion of Red Hat Linux.

Notices

Reply
 
Search this Thread
Old 02-02-2010, 04:14 PM   #1
jholp
LQ Newbie
 
Registered: Jan 2010
Posts: 13

Rep: Reputation: 0
Audit for Red Hat 5.2 enterprise server


I am trying to initilaize auditing on a Red Hat 5.2 enterprise server.

Things like:
/sbin/chkconfig audit on
/etc/audit/audit.rules
/var/log/audit/audit.log

are what I am looking at, but I need to know where things go to start the audit service.

A simple example with all of the pieces set to audit, then I can add rules to match requirements.

There must be beginners audit white papers.

Just point me in the direction.

Thanks,

John
 
Old 02-02-2010, 11:02 PM   #2
John VV
Guru
 
Registered: Aug 2005
Posts: 12,707

Rep: Reputation: 1688Reputation: 1688Reputation: 1688Reputation: 1688Reputation: 1688Reputation: 1688Reputation: 1688Reputation: 1688Reputation: 1688Reputation: 1688Reputation: 1688
one of the first things i would do is call RED HAT
and use your paid for support .

but seeing as this is 5.2 ( the current is 5.4 ) you did not pay$$ red hat for the security updates ( big no-no)
pay Red Hat for the updates then
update to 5.4
Code:
yum update
 
Old 02-03-2010, 12:06 AM   #3
chrism01
Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.5, Centos 5.10
Posts: 16,251

Rep: Reputation: 2026Reputation: 2026Reputation: 2026Reputation: 2026Reputation: 2026Reputation: 2026Reputation: 2026Reputation: 2026Reputation: 2026Reputation: 2026Reputation: 2026
You use chkconfig to tell the system what init levels audit should be started on at reboot.
to start it manually ie sans reboot try one of

http://linux.die.net/man/8/system-config-services

http://linux.die.net/man/8/ntsysv

root> service audit start

not sure if it's audit or auditd there.
 
Old 02-03-2010, 04:47 AM   #4
XavierP
Moderator
 
Registered: Nov 2002
Location: Kent, England
Distribution: Lubuntu
Posts: 19,174
Blog Entries: 4

Rep: Reputation: 428Reputation: 428Reputation: 428Reputation: 428Reputation: 428
Moved: This thread is more suitable in Red Hat and has been moved accordingly to help your thread/question get the exposure it deserves.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How To setup remote access server on Red Hat Enterprise Linux Server release 5.1 bagra Linux - Newbie 5 10-19-2011 07:04 PM
telnet server not starting on Red Hat Enterprise 5.1 logsbyrn Linux - General 2 09-18-2008 03:31 AM
KDE upgrade on Red Hat Enterprise Server 4 sk72 Red Hat 1 02-01-2008 02:21 PM
Project made in Red Hat Enterprise 4 need to be able to run on Red Hat Enterprise 3 Elin Linux - Software 1 07-13-2006 12:22 PM
Upgrading Red Hat 9 to Red Hat Enterprise Server 3 AS louisb Linux - Software 7 02-23-2004 10:25 PM


All times are GMT -5. The time now is 10:15 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration