buffer space

LC Bruzenak lenny at magitekltd.com
Thu Aug 27 17:33:23 UTC 2009


On Thu, 2009-08-27 at 13:21 -0400, David Flatley wrote:
> When auditd starts and reports an error on a line in the audit.rules,
> does auditd continue to run with the rest of the rules?
> Or does auditd stop waiting for a correction to the rules file? An
> example would be on syscalls for fchown32 or umount. 
> Thanks.
> 
> 
> David Flatley CISSP
> 

David,

You can always run "sudo auditctl -l" to see which ones are loaded.

LCB.
-- 
LC (Lenny) Bruzenak
lenny at magitekltd.com




More information about the Linux-audit mailing list