Duplicate Rule situation
warron.french
warron.french at gmail.com
Mon Jun 21 16:52:12 UTC 2021
Does anybody know if I put the following two rules into the same
audit.rules file and reboot the server will we end up with some broken
rules?
-w /etc/audit/ -p a -k watch_audit
-w /etc/audit/rules.d/ -p a -k watch_audit
Will this cause a problem due to duplicate rules?
--------------------------
Warron French
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20210621/f3bbafaa/attachment.htm>
More information about the Linux-audit
mailing list