[Slackbuilds-users] slack-desc for system/audit needs an update and upgrade to version 3.1.5 is possible.

[Didier Spaier]

In https://slackbuilds.org/slackbuilds/15.0/system/audit/slack-desc I read:

audit: The audit subsystem, which is not enabled in stock Slackware kernels
audit: must be enabled and the kernel rebuilt in order to use auditd

However in kernels shipped in Slackware version 15.0 audit is enabled as shown
in the output of "zgrep AUDIT /proc/config.gz".

Also, audit could be updated to 3.1.5 just changing the value of VERSION. I have
built it in a clean and up to date Slackwre64-15.0 in a VM and at least the
daemon auditd starts.

The most recent version of audit is 4.0.2 but it wouldn't work in a genuine
Slackware 15.0 as the support of SysVinit has been dropped since version 4.0 as
stated in this ChangeLog:
https://people.redhat.com/sgrubb/audit/ChangeLog
In case someone wonders, version 3.1.5 is not mentioned there but is available:
https://people.redhat.com/sgrubb/audit/audit-3.1.5.tar.gz

I don't know if Bogdan in CC is still active, but maybe an admin take care of
this upgrade, or someone take over the SlackBuild.

As an aside Frank Honolka has recently successfully built audit 4.0.2 for
Slackware 15.0 and current but with systemd - this is what triggered my
curiosity about audit, as I didn't even know it existed ;)

Cheers,
Didier