When auditd starts and reports an error on a line in the audit.rules,
does auditd continue to run with the rest of the rules?
Or does auditd stop waiting for a correction to the rules file? An example
would be on syscalls for fchown32 or umount.
Thanks.
David Flatley CISSP