Monitoring files

F Rafi farhanible at gmail.com
Tue Apr 24 03:41:10 UTC 2018


Adding a -i to the rules file should ignore any errors.

-Farhan

On Mon, Apr 23, 2018 at 9:19 PM, warron.french <warron.french at gmail.com>
wrote:

> Hi, I have a requirement to monitor a ton of files, executables and confug
> files.
>
> Anyway, not all of my systems have every file in the list; and when I add
> the rules appropriate, either as a Watch (-w) rule or as an Action (-a)
> rule, the rules stop loading when the find a rule that has a file that
> doesn't exist *on that particular system*.
>
> This is the intended effect, yes?
>
> Thanks in advance,
> --------------------------
> Warron French
>
>
> --
> Linux-audit mailing list
> Linux-audit at redhat.com
> https://www.redhat.com/mailman/listinfo/linux-audit
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20180423/026bbe14/attachment.htm>


More information about the Linux-audit mailing list