audit-0.6.7 released

Steve Grubb sgrubb at redhat.com
Thu Mar 10 18:57:07 UTC 2005


On Thursday 10 March 2005 13:49, Mounir Bsaibes wrote:
> Now, the question: Is there any additional requirement to satisfy CAPP
> in this situation? 

I can't answer this.

> Or, this is totally acceptable; since the file size can be set large enough.

Or, maybe they do not need to put ROTATE in the max_log_file_action parameter. 
IGNORE should let the file grow until another limit/action prevents it.

-Steve




More information about the Linux-audit mailing list