<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2654.45">
<TITLE>RE: [olug] C2 Auditing on RedHat?</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>The only C2 type of auditing of Linux that I know of is the security enhanced version of Linux from the NSA.</FONT>
</P>
<P><FONT SIZE=2>This version audits just about anything and every change or permission that the system can have done to it. It is an attempt to build a C2 OS like Trusted Solaris and the others but has not been certified or tested for C2.</FONT></P>
<P><FONT SIZE=2>Find it at <A HREF="http://www.nsa.gov/selinux/" TARGET="_blank">http://www.nsa.gov/selinux/</A></FONT>
</P>
<P><FONT SIZE=2>Hope it helps,</FONT>
<BR><FONT SIZE=2>John</FONT>
</P>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Blaufuss, Shane [<A HREF="mailto:sblaufuss@fnni.com">mailto:sblaufuss@fnni.com</A>]</FONT>
<BR><FONT SIZE=2>Sent: Wednesday, August 28, 2002 1:14 PM</FONT>
<BR><FONT SIZE=2>To: olug@olug.org</FONT>
<BR><FONT SIZE=2>Subject: [olug] C2 Auditing on RedHat?</FONT>
</P>
<BR>
<P><FONT SIZE=2>Does anyone know if this is possible? There doesn't seem to be any auditing</FONT>
<BR><FONT SIZE=2>packages included with the distro. I was hoping for something like</FONT>
<BR><FONT SIZE=2>Solaris's auditd.</FONT>
</P>
<BR>
<P><FONT SIZE=2>--</FONT>
<BR><FONT SIZE=2>Shane M. Blaufuss</FONT>
<BR><FONT SIZE=2>Systems Engineer</FONT>
<BR><FONT SIZE=2>First Nat.'l Bank of Omaha</FONT>
<BR><FONT SIZE=2>(402) 633-7288 </FONT>
</P>
<P><FONT SIZE=2>_______________________________________________</FONT>
<BR><FONT SIZE=2>OLUG mailing list</FONT>
<BR><FONT SIZE=2>OLUG@olug.org</FONT>
<BR><FONT SIZE=2><A HREF="http://lists.olug.org/mailman/listinfo/olug" TARGET="_blank">http://lists.olug.org/mailman/listinfo/olug</A></FONT>
</P>
</BODY>
</HTML>