On Monday, January 20, 2020 9:24:56 AM EST Leam Hall wrote: > If /etc/audit/auditd.conf encounters conflicting duplicate settings, > what happens? Takes the first, takes the last, or what? For example: > > space_left = 25 > space_left = 100
It overwrites the first value with the second one. You can also run: # service auditd state to see what the current value is if your audit daemon is somewhat recent. -Steve -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit
