Re: auditing auditctl
On Friday 29 July 2005 16:17, Amy Griffis wrote:
Doing something like 'auditctl -l' floods the console with
audit
records.
This could be normal depending on your rules and what pid it's reporting. If
it reports the auditd pid, we have a problem. If it reports auditctl's pid,
this might be expected.
-Steve