Setting priority to auditd rule files

Anurag Aggarwal anurag19aggarwal at gmail.com
Mon Jan 30 05:21:53 UTC 2023


Hello All,

As per my understanding, currently auditd picks up rule files as per
alphabetical order.
Is there a way to force auditd to prioritize which rule file should be
first read and applied, other than renaming it as 000-<app>.rules and
hoping that customers don't have anything lexicographically smaller than
this?

-- 
Anurag Aggarwal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20230130/eee1dff8/attachment.htm>


More information about the Linux-audit mailing list