auid unset

klausk at br.ibm.com klausk at br.ibm.com
Thu Dec 6 19:18:22 UTC 2007


> $ audearch -m DAEMON_START 

read that as $ausearch -m DAEMON_START

The best option would still be just 'rpm -q audit' and check the output

-- 
Klaus Heinrich Kiwi/Brazil/IBM <klausk at br.ibm.com>
Software Engineer
IBM STG, Linux Technology Center
Phone:(+55-19) 2132-1909 [T/L 839-1909]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20071206/49d74756/attachment.htm>


More information about the Linux-audit mailing list