audit.rules file [Was: audit 2.3 released]

Laurent Bigonville bigon at debian.org
Mon May 6 14:02:19 UTC 2013


Le Mon, 06 May 2013 09:17:18 -0400,
Steve Grubb <sgrubb at redhat.com> a écrit :

> What I did in Fedora is to add a post install action like this:
> 
> %post
> # Copy default rules into place on new installation
> if [ ! -e /etc/audit/audit.rules ] ; then
>         cp /etc/audit/rules.d/audit.rules /etc/audit/audit.rules
> fi
> 
> This way if its a new install, you get a copy of the rules and if
> there are any previously existing rules, they are not overwritten.

Thanks, yes I figured that out too, I should probably not post emails
before my 1st cup of coffee on Sunday morning :)

Cheers

Laurent Bigonville




More information about the Linux-audit mailing list