buffer space
LC Bruzenak
lenny at magitekltd.com
Thu Aug 27 17:33:23 UTC 2009
On Thu, 2009-08-27 at 13:21 -0400, David Flatley wrote:
> When auditd starts and reports an error on a line in the audit.rules,
> does auditd continue to run with the rest of the rules?
> Or does auditd stop waiting for a correction to the rules file? An
> example would be on syscalls for fchown32 or umount.
> Thanks.
>
>
> David Flatley CISSP
>
David,
You can always run "sudo auditctl -l" to see which ones are loaded.
LCB.
--
LC (Lenny) Bruzenak
lenny at magitekltd.com
More information about the Linux-audit
mailing list