Question about audit-2.1.3-3.el6x86_64 and item in nispom man page

Scott Packard Scott.Packard at raytheon.com
Thu Nov 15 23:45:32 UTC 2012


In RHEL 6.2,
the /usr/share/doc/audit-2.1.3/nispom.rules page says:
...
## Set failure mode to panic
-f 2
...

Yet, I do not see a "-f" option documented in the audit.rules(7) man page.
man auditd shows a -f option, but that does not look applicable.

Is this option an artifact of an earlier rev of auditd, and no longer
applicable now?
I see an option in /etc/audit/auditd.conf, "disk_full_action = ", that
seems to closely
match what that nispom option seems to be trying to do.

If the "-f" option is current, where is it and those other nispom options
documented?

Regards, Scott
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20121115/453d0f91/attachment.htm>


More information about the Linux-audit mailing list