Can someone please tell me if the audit flag option "-f" is set to 2 if the
system will shutdown, freeze or provide some warning that auditing has
stopped?
I am trying to get RHEL 4 U4 certified and am having to prove that the
system will "crash" once audit partition is full and auditing stops.
Thanks,
Paul Whitney
Information System Solutions
Paul.whitney(a)mac.com