Sponsored Content
Special Forums News, Links, Events and Announcements Software Releases - RSS News audit daemon 1.7.9 (Default branch) Post 302255076 by Linux Bot on Wednesday 5th of November 2008 10:10:07 PM
Old 11-05-2008
audit daemon 1.7.9 (Default branch)

The audit package contains the user-spaceutilities for creating audit rules, as well as forstoring and searching the audit records generateby the audit subsystem in the Linux 2.6 kernel. It also has a basic Intrusion Detection plugin based on audit events capable of IDMEF alerting using prelude.License: GNU General Public License (GPL)Changes:
Improved support for kernel audit system immutable mode. A limit on restarts of crashed audispd plugins. Improved handling of audit events from PAM. Improved support for session association in ausearch. This release introduces the aulast command, which is similar to the utmp-based "last" command.Image

Image

More...
 
audit_memory_usage(5)						File Formats Manual					     audit_memory_usage(5)

NAME
audit_memory_usage - percentage of physical memory that can be used by audit subsystem VALUES
Failsafe Default Allowed values Recommended values DESCRIPTION
The tunable defines the percentage of physical memory that can be used by audit records. If the audit record memory usage exceeds the limit, the audit subsystem blocks the system call until memory usage comes down inside the limit. Who Is Expected to Change This Tunable? Administrator with proper privileges can change the value of Restrictions on Changing This tunable value can be changed any time, as this is a dynamic tunable; but its value can not be lowered below the memory currently used by the audit subsystem for records. When Should the Value of This Tunable Be Raised? When the system to be audited is critical and generates many records. What are the Side Effects of Raising the Value? If the system is generating great number of records, and the value is raised, then it can create a lot of unflushed memory and might slow down the system. When Should the Value of This Tunable Be Lowered? When the audit subsystem is not generating many records. What are the Side Effects of Lowering the Value? If many audit records are generated, then the auditing subsystem might block the system call. What Other Tunable Values Should Be Changed at the Same Time? None. WARNINGS
All HP-UX kernel tunable parameters are release specific. This parameter may be removed or have its meaning changed in future releases of HP-UX. Installation of optional kernel software, from HP or other vendors, may cause changes to tunable parameter values. After installation, some tunable parameters may no longer be at the default or recommended values. For information about the effects of installation on tun- able values, consult the documentation for the kernel software being installed. For information about optional kernel software that was factory installed on your system, see at AUTHOR
was developed by HP. SEE ALSO
audit(5). Tunable Kernel Parameters audit_memory_usage(5)
All times are GMT -4. The time now is 12:44 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy