Hello All,
As per my understanding, currently auditd picks up rule files as per
alphabetical order.
Is there a way to force auditd to prioritize which rule file should be
first read and applied, other than renaming it as 000-<app>.rules and
hoping that customers don't have anything lexicographically smaller than
this?
--
Anurag Aggarwal