buffer space
Steve Grubb
sgrubb at redhat.com
Thu Aug 27 17:32:20 UTC 2009
On Thursday 27 August 2009 01:21:43 pm David Flatley wrote:
> When auditd starts and reports an error on a line in the audit.rules,
> does auditd continue to run with the rest of the rules?
> Or does auditd stop waiting for a correction to the rules file?
It depends on whether or not its processed a "-i" directive in the rules. If
not, it stops. If so, it continues.
-Steve
More information about the Linux-audit
mailing list