Re: buffer space
On Thu, 2009-08-27 at 13:21 -0400, David Flatley wrote:
When auditd starts and reports an error on a line in the
audit.rules,
does auditd continue to run with the rest of the rules?
Or does auditd stop waiting for a correction to the rules file? An
example would be on syscalls for fchown32 or umount.
Thanks.
David Flatley CISSP
David,
You can always run "sudo auditctl -l" to see which ones are loaded.
LCB.
--
LC (Lenny) Bruzenak
lenny(a)magitekltd.com