buffer space

Steve Grubb sgrubb at redhat.com
Thu Aug 27 17:32:20 UTC 2009


On Thursday 27 August 2009 01:21:43 pm David Flatley wrote:
>    When auditd starts and reports an error on a line in the audit.rules,
> does auditd continue to run with the rest of the rules?
> Or does auditd stop waiting for a correction to the rules file?

It depends on whether or not its processed a "-i" directive in the rules. If 
not, it stops. If so, it continues.

-Steve




More information about the Linux-audit mailing list