Re: auditd -- User space tools for 2.6 kernel SELinux auditing
On Friday 23 March 2007 05:42, Manoj Srivastava <firstname.lastname@example.org> wrote:
> I would prefer you do move it back to /sbin. A number of
> SELinux tools are moving to depend on audit, and some of these do
> require them to be functional before the other file systems are
> mounted. I can live with them being in /usr, but that does reduce
> the functionality of user tools for SELinux in early boot.
I think it's probably best to leave it in the upstream location in this case.
However given that /var/log will probably be a separate FS and /var/log/audit
will certainly be a separate FS for anyone who is really serious about
auditing it seems that relying on /usr isn't going to be a problem - non-root
FSs have to be mounted before auditd is started anyway.
> Thanks for taking up audit, BTW, or else I wqould have had top
> package it myself for lenny, and I don't really want any more
> packages than I already have.
http://etbe.blogspot.com/ My Blog
http://www.coker.com.au/sponsorship.html Sponsoring Free Software development