Duplicate Rule situation

warron.french warron.french at gmail.com
Mon Jun 21 16:52:12 UTC 2021


Does anybody know if I put the following two rules into the same
audit.rules file and reboot the server will we end up with some broken
rules?

-w /etc/audit/                     -p a -k watch_audit
-w /etc/audit/rules.d/         -p a -k watch_audit

Will this cause a problem due to duplicate rules?

--------------------------
Warron French
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20210621/f3bbafaa/attachment.htm>


More information about the Linux-audit mailing list