Linux audit "kill syscall" to be logged before to be run ?

[Eric Durand]

Hello,

I would like to log the syscall before it's to be run.

Example : I would like to log using syslog the kill of audispd or even
auditd.

Is it a way to do it ?

Regards

FP
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20100607/bd4debd4/attachment.htm>