Hi, I have a requirement to monitor a ton of files, executables and confug files.

Anyway, not all of my systems have every file in the list; and when I add the rules appropriate, either as a Watch (-w) rule or as an Action (-a) rule, the rules stop loading when the find a rule that has a file that doesn't exist on that particular system.

This is the intended effect, yes?

Thanks in advance, 

--------------------------
Warron French

--
Linux-audit mailing list
Linux-audit@redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit