CentOS

No Internet connection

• https://geekflare.com/no-internet-connection-from-vmware-with-centos-7/

Static IP for Host-only VM network

• http://bingobo.info/blog/recipes/how-to-set-up-static-ip-for-centos-in-virtualbox.jsp
• https://www.centos.org/docs/5/html/5.1/Deployment_Guide/s1-networkscripts-files.html

Build audit-userspace

• Alternatively, check this out: http://serverfault.com/questions/753829/auditd-how-to-install-from-source-in-ubuntu.

Get the source code

curl -O http://people.redhat.com/sgrubb/audit/audit-2.6.5.tar.gz
gzip -d audit-2.6.5.tar.gz
tar xf audit-2.6.5.tar
cd audit-2.6.5

Install

yum install libtool tcp_wrappers-devel openldap-devel python-devel libcap-ng-devel swig
./configure --sbindir=/sbin --with-python=yes --with-libwrap --enable-gssapi-krb5=yes --with-libcap-ng=yes
make
make install

Reference to install fixes

• https://workonlinux.wordpress.com/2012/09/12/checking-for-libwrap-configure-error-libwrap-missing/
• How to use yum to fix missing dependencies issues?

How to find out if I succeed?

# Stop auditd.
service auditd stop
# Backup old logs.
mv /var/log/audit/audit.log /var/log/audit/audit2.log
# Start auditd.
service auditd start
# Check out the record starting with `type=DAEMON_START`.
# It has a field called ver which value is the auditd's version.
head /var/log/audit/audit.log

Install the latest kernel

http://www.ostechnix.com/install-linux-kernel-4-4-5-centos-ubuntu/

Configure auditd

https://www.digitalocean.com/community/tutorials/how-to-write-custom-system-audit-rules-on-centos-7

• Add the rules to /etc/audit/rules.d/audit.rules to make them permanent.

Configure audisp

• The NOLOG value of log_format in /etc/audit/auditd.conf is deprecated.