Current Red Hat Kernels 2.6.18 & 2.6.32 not able to have non-existent files in audit.rules?

leam hall leamhall at gmail.com
Tue Feb 2 17:05:38 UTC 2016


Running into errors where we're pushing out a blanket audit.rules file and
some servers don't have some of the files. I've seen the -i and -c
suggestion for auditctl but wanted to confirm that that's the right choice.
We need to ensure warnings don't choke auditd or make it skip other rules.

-- 
Mind on a Mission <http://leamhall.blogspot.com/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20160202/2f25825b/attachment.htm>


More information about the Linux-audit mailing list