> $ audearch -m DAEMON_START read that as $ausearch -m DAEMON_START
The best option would still be just 'rpm -q audit' and check the output -- Klaus Heinrich Kiwi/Brazil/IBM <[EMAIL PROTECTED]> Software Engineer IBM STG, Linux Technology Center Phone:(+55-19) 2132-1909 [T/L 839-1909]
-- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
