On Thursday 19 May 2005 11:20, David Woodhouse wrote:
* Thu May 19 2005 David Woodhouse <dwmw2(a)redhat.com> audit.43
- printk in audit_log_end() when no auditd
- Don't audit auditd itself
^^^^^^^^^^^^^^^^^^^^^^^^^^^
If audit pid == 0 (no daemon), you won't be able to audit init.
-Steve