[redhat-lspp] what happens when something can't be audited?

[Steve Grubb]

On Friday 09 February 2007 12:33, James W. Hoeft wrote:
> This doesn't address the behavior of the individual apps/daemons, but if
> it isn't TOO much trouble to address an audit "failure" at that level,
> in order to tailor the behavior based on the criticality of the system,
> that would be ideal.

It doesn't sound like too much trouble for some operations.

> (in the case of printing, our accreditors would want the job canceled -
> other functions would be on a case-by-case basis) 

I think its reasonable to mark the printer unavailable to keep the job queued 
or even canceled.

-Steve