rotating audit logs

Steve Grubb sgrubb at redhat.com
Tue Feb 13 16:37:59 UTC 2007


On Tuesday 13 February 2007 11:16, Bill Tangren wrote:
> How do I prevent auditd from rotating by size?

Set max_log_file_action=ignore

> Set the maximum size too high to be reached in a day? 

No, there are 2 controls, the file size and what to do when its reached. In 
this case you don't care about the size, but you care about what it does.

-Steve




More information about the Linux-audit mailing list