Fwd: Re: Fw: Audit records for start/stop auditd

Steve Grubb sgrubb at redhat.com
Wed Apr 6 14:06:27 UTC 2005


On Wednesday 06 April 2005 09:59, Steve Grubb wrote:
> This is actually the cleanest way for the audit daemon. No races, no
> hanging around waiting for a message that may never come.

On second thought, what if they send a SIGKILL? Maybe we need Dave's original 
patch and this?

-Steve




More information about the Linux-audit mailing list