Duplicate settings?

Steve Grubb sgrubb at redhat.com
Mon Jan 20 14:37:32 UTC 2020


On Monday, January 20, 2020 9:24:56 AM EST Leam Hall wrote:
> If /etc/audit/auditd.conf encounters conflicting duplicate settings,
> what happens? Takes the first, takes the last, or what? For example:
> 
> 	space_left = 25
> 	space_left = 100

It overwrites the first value with the second one. You can also run:

# service auditd state

to see what the current value is if your audit daemon is somewhat recent.

-Steve





More information about the Linux-audit mailing list