audit-0.6.7 released
Steve Grubb
sgrubb at redhat.com
Thu Mar 10 18:57:07 UTC 2005
On Thursday 10 March 2005 13:49, Mounir Bsaibes wrote:
> Now, the question: Is there any additional requirement to satisfy CAPP
> in this situation?
I can't answer this.
> Or, this is totally acceptable; since the file size can be set large enough.
Or, maybe they do not need to put ROTATE in the max_log_file_action parameter.
IGNORE should let the file grow until another limit/action prevents it.
-Steve
More information about the Linux-audit
mailing list