audit.44 kernel

Steve Grubb sgrubb at redhat.com
Fri May 20 13:53:42 UTC 2005


On Thursday 19 May 2005 11:20, David Woodhouse wrote:
> * Thu May 19 2005 David Woodhouse <dwmw2 at redhat.com> audit.43
> - printk in audit_log_end() when no auditd
> - Don't audit auditd itself
^^^^^^^^^^^^^^^^^^^^^^^^^^^

If audit pid == 0 (no daemon), you won't be able to audit init.

-Steve




More information about the Linux-audit mailing list