Click to See Complete Forum and Search --> : Auditing capabilities in/with 2.4.x kernels


SUOrangeman
07-24-2001, 03:43 PM
I have to tighten security on a few of my Linux boxes. In particular, I have to demonstrate the audit of events like:

Successful login/logoff
Failed login
Password change
Account lockout (after # of failed logins)
(attempted) access to privileged files (/etc/shadow, audit logs, etc.)

I am aware of auditd, but is doesn't seem to be updated for 2.4 kernels (RH 7.0 & Mandrake 8.0). Are such features already buil-in to 2.4? How does one control such capabilities?

Thanks in advance.

-SUO

SUOrangeman
07-30-2001, 09:35 AM
Anyone?

-SUO