I am a little confused. For dazuko, the announcement states "ASL Kernel is required, 2.8.32.8 recommended". However, I do keep my system up to date and my kernel is "kernel-2.6.32.8-1.art.x86_64". Was this a typo?

And speaking of dazuko, I did install as recommended and was expecting to find /etc/asl/dazuko-include but no file was there. I am leery of gong any further to implement.

Thanks as always.

Do the following


Do you see that version installed? If so, you just haven't rebooted yet.

Thanks for the help Highland. Here is what I get:

# rpm -qa kernel
kernel-2.6.32.8-1.art
kernel-2.6.27.7-9.art
kernel-2.6.29.6-1.art

i bet its a typo since kernel 2.8 does not exist now and i think it will take some time it will

Yes, 2.8.32.8 recommended 2.8.32.8 is a typo, is supposed to be 2.6.32.8 (and correctly now in the original forum post).

Regarinding the include and exclude files, its safe to create those. ASL has no idea what to put into them so it shouldnt create them, you have to add into them what you think is appropriate for your system. Here is what I recommend for dazuko-include:

/var/www/vhosts
/home
/var/tmp
/tmp
/usr/local/psa/tmp

ASL will check to make sure those directories exist and if they do not, it wont let this configuration load. clamd is picky, if any directory in the include list doesnt exist it will not enable dazuko support for all directories.

sidenote: you have to run asl -s -f to get the new dazuko-include to load. Just restarting clamd isn't enough.