Re: audit.rules file [Was: audit 2.3 released]
Le Mon, 06 May 2013 09:17:18 -0400,
Steve Grubb <sgrubb(a)redhat.com> a écrit :
What I did in Fedora is to add a post install action like this:
%post
# Copy default rules into place on new installation
if [ ! -e /etc/audit/audit.rules ] ; then
cp /etc/audit/rules.d/audit.rules /etc/audit/audit.rules
fi
This way if its a new install, you get a copy of the rules and if
there are any previously existing rules, they are not overwritten.
Thanks, yes I figured that out too, I should probably not post emails
before my 1st cup of coffee on Sunday morning :)
Cheers
Laurent Bigonville