LAuS概述

系统命令：man laus
Linux Audit-Subsystem(LAuS)是Linux安全系统下用于让管理员监控系统调用的子系统，有几个从内核空间到用户空间的不通组件组成，对于REHL系统，是在RHEL AS3 Update 2时作为RHEL EAL3的特征引入系统的，对于正常运行的系统，个人觉得不需要激活。

与LAuS相关的一些命令：
audit 启动命令
laus-records(7)

监控信息一般记录在/var/log/audit.d/下面，为二进制格式的数据，但是可以通过aucat和augrep命令查看。
配置文件用于通知audit进程监控哪些调用，audit-filter.conf 和audit进程本身的配置文件audit.conf。

更多的关于Audit子系统信息可以在RHEL安全手册上查到。

建议：在你确认不需要时（一般生产用系统不需要），请关闭Audit子系统
方法：chkconfig --level 345 audit off

Comments

Post a Comment

Popular posts from this blog

Freeware Software Top 300 from winAddons.Com!

来自winAddons.Com的推荐，最好的300款免费软件，其中当然不乏Open Source的品牌产品，如OpenOffice，Firefox等，也包含了Windows平台下常用的不花钱的玩意儿，如Adobe Acrobat Reader等。 全文摘录如下， 对我个人经常使用和熟悉的一些产品进行了评价！！ Office 办公软件 OpenOffice - 最著名的免费的办公套件 PC Suite 602 - office suite AbiWord - text editor Atlantis Nova - text editor Microsoft PowerPoint Viewer - power point files viewer Adobe Reader - pdf reader Foxit PDF Reader - pdf reader PDFCreator - 优秀的PDF制作引擎，用于直接打印到PDF文件 Doc Convertor - document convertor Convert - unit convertor Converber - unit convertor Sunbird - calendar/organizer EssentialPIM Free - calendar/organizer PhraseExpress - speed up your writing ATnotes - create notes on the desktop Archive managers 压缩文件管理器 7-Zip - 最流行的免费压缩工具 IZArc - compression program TugZIP - compression program CabPack - compression program Universal Extractor - extract files from any type of archive Internet 因特网 Firefox - 火狐，火狐 Internet Explorer - web browser Maxthon - web browser Opera - web browser Avant Browser - web browser Thu...
Read more

What is DevOPS?

Image
What is DevOPS? As be a DevOPS engineer more than five years in the past, I was always asked what is DevOPS or what is a DevOPS role or what should a DevOPS Engineer do? Or even question like how to be a good DevOPS? What? How? should be the most two frequently questions from almost all organizations. As I am working with  Amazon Web Service  for a long time with my DevOPS career, I tried to get answers from AWS guys frist as they have a special section about AWS DevOPS, also they have AWS DevOPS certificate cources, even though I never try such cources. This is the first page said about DevOPS on AWS DevOPS to answer "What is DevOPS?", DevOps is the combination of cultural philosophies, practices, and tools that increases an organization’s ability to deliver applications and services at high velocity: evolving and improving products at a faster pace than organizations using traditional software development and infrastructure management processes. This speed enable...
Read more

RPM Build Tips!

Now, I am trying to build a Linux system based on the Fedora Core Release! Working with the RPM system in deep.The unpackaged file terminate the build process under RPM 4.x! Unpackaged files message in RPM-4.1 and following RPM version 4.1 and following demonstrate a new behaviour in the rpmbuild process. Previously, a build process might place any number of files, say in the %install stanza, when running the make install part of a Makefile , in the customary /var/tmp/%{name}-root/ BuildRoot (the RPM_BUILD_ROOT ). Once through that part of the Makefile , it can then completely ignore these files in the %files binary packaging stanza. This often happens when an upstream maintainer adds, or deletes items from new directory spurs in the make install , and the change might be missed during an unattended or automated rebuild. This option permits careful packagers to cross check the quality of their packaging. So as a cross check, /usr/lib/rpm/check-files is now enabled during ...
Read more