Local and remote copies of audit.log?



Reviewing the man pages of auditd (I'm using audit 1.5.2) on CentOS 5, it doesn't seem obvious that I can log events locally AND send a copy to a remote log host. Am I misreading it?

Thanks.

Scott

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list



Relevant Pages

  • Re: Heartland Gets Religion on Security
    ... Over at DataLossDB, I inquired about adding a column for the ... > the audit didn't detect the vulnerability that led to the hack even though ... the assessor didn't do a thorough job either of reviewing them. ...
    (Pen-Test)
  • Re: For what reason would IRS send certified mail?
    ... I got one of those "we are reviewing your 2004 return" ... decided that I owed them some unpayable amount and I had two choices, ... My favorite story along those lines was the "mail audit" my live-in ... mortgage interest deduction. ...
    (rec.sport.football.college)
  • Re: Problems with auditd
    ... been reading online posts about auditd and auditing (as well as the man ... If I run audit -s, ... You would think, if the system is going to install the daemon, it would have that option in the GENERIC kernel. ...
    (freebsd-questions)
  • Re: Auditing subdirectories recursively using auditd
    ... Sent via BlackBerry from T-Mobile ... I found that auditd daemon is very useful to audit my linux ...
    (RedHat)
  • Re: Is auditd needed to run?
    ... is, if you're running auditd, audit messages are put into ... SELinux uses the audit subsystem. ... in CentOS4, we don't have ...
    (comp.os.linux.setup)