On Thursday 27 August 2009 01:21:43 pm David Flatley wrote: > When auditd starts and reports an error on a line in the audit.rules, > does auditd continue to run with the rest of the rules? > Or does auditd stop waiting for a correction to the rules file?
It depends on whether or not its processed a "-i" directive in the rules. If not, it stops. If so, it continues. -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
