Does anybody know if I put the following two rules into the same
audit.rules file and reboot the server will we end up with some broken
rules?
-w /etc/audit/ -p a -k watch_audit
-w /etc/audit/rules.d/ -p a -k watch_audit
Will this cause a problem due to duplicate rules?
--------------------------
Warron French