Re: on machine with CPU -> 100%, lots of avc's

[Steve Grubb <sgrubb redhat com>]

On Wednesday 04 February 2009 07:23:03 pm Antonio Olivares wrote:
> They are similar, difference is yours are all rw, mine I have only 1 rw :?
>
> [root localhost ~]# ls -l /var/log/audit/
> total 13476
> -r-------- 1 root root 5242944 2008-03-12 08:16 audit.log
> -r-------- 1 root root 5242944 2008-03-12 08:16 audit.log.1
> -rw------- 1 root root 2140000 2008-03-12 08:17 audit.log.2
> -r-------- 1 root root 5242944 2008-03-12 08:14 audit.log.3

Quick question...what audit package are you running?

-Steve