When auditd starts and reports an error on a line in the audit.rules, does auditd continue to run with the rest of the rules?
Or does auditd stop waiting for a correction to the rules file? An example would be on syscalls for fchown32 or umount.
Thanks.


David Flatley CISSP