auditd restart atomic?
If I restart auditd, can it lose (not record to the logs) events that
happen during the restart? Or is the restart (and reload of new rules)
essentially atomic?
Thanks,
--Chris
Attachments:
- attachment.html (text/html — 265 bytes)