audit.rules file [Was: audit 2.3 released]
Laurent Bigonville
bigon at debian.org
Mon May 6 14:02:19 UTC 2013
Le Mon, 06 May 2013 09:17:18 -0400,
Steve Grubb <sgrubb at redhat.com> a écrit :
> What I did in Fedora is to add a post install action like this:
>
> %post
> # Copy default rules into place on new installation
> if [ ! -e /etc/audit/audit.rules ] ; then
> cp /etc/audit/rules.d/audit.rules /etc/audit/audit.rules
> fi
>
> This way if its a new install, you get a copy of the rules and if
> there are any previously existing rules, they are not overwritten.
Thanks, yes I figured that out too, I should probably not post emails
before my 1st cup of coffee on Sunday morning :)
Cheers
Laurent Bigonville
More information about the Linux-audit
mailing list