<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.26.0">
</HEAD>
<BODY>
I think the auditd package that ships with 5.3 has a bug. Use one of the newer versions available from<BR>
<BR>
<A HREF="http://people.redhat.com/sgrubb/audit/index.html">http://people.redhat.com/sgrubb/audit/index.html</A><BR>
<BR>
On Mon, 2009-04-27 at 11:15 -1000, Dave Trepanier wrote:<BR>
<BLOCKQUOTE TYPE=CITE>
<FONT SIZE="2">uditd audit.log files stops receiving log entries until the auditd service is stopped and restarted. The logs entries re-start also after I run audit –f. I have been thinking about updating auditd , currently release 7.7.7-6, to a newer release. The challenge is updating it without an internet connection. The machine cannot be connected to the internet, so all program dependencies need to be installed manually. Does anyone k</FONT>
</BLOCKQUOTE>
</BODY>
</HTML>