On Thu, 2009-08-27 at 13:21 -0400, David Flatley wrote: > When auditd starts and reports an error on a line in the audit.rules, > does auditd continue to run with the rest of the rules? > Or does auditd stop waiting for a correction to the rules file? An > example would be on syscalls for fchown32 or umount. > Thanks. > > > David Flatley CISSP >
David, You can always run "sudo auditctl -l" to see which ones are loaded. LCB. -- LC (Lenny) Bruzenak [email protected] -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
