RHEL 6 audit.rules question

[Dan White]

On Jul 30, 2014, at 04:33 PM, Steve Grubb <sgrubb at redhat.com> wrote:

> On Wednesday, July 30, 2014 08:21:45 PM Dan White wrote:
>        > Does the system allow for the import/include of groups of rules in other
>        > files - like logrotate and /etc/logrotate.d/* ?
>
> No, but in 2.3 and later there is a /etc/audit/rules.d/ directory where rules
> can be dropped off. The augenrules utility will "compile" those into a master
> audit.rules file. You also have to enable augenrules by setting
> USE_AUGENRULES="yes" in /etc/sysconfig/audit. that is about as close as it
> comes.
>
> -Steve
 
Thanks for the quick answer.
Any plans to release 2.3.x to RHEL 6 that can be shared ?

“Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.”  (Bill Waterson: Calvin & Hobbes)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20140731/6d2b980b/attachment.htm>