Does anybody know if I put the following two rules into the same audit.rules file and reboot the server will we end up with some broken rules?
-w /etc/audit/ -p a -k watch_audit -w /etc/audit/rules.d/ -p a -k watch_audit Will this cause a problem due to duplicate rules? -------------------------- Warron French
-- Linux-audit mailing list [email protected] https://listman.redhat.com/mailman/listinfo/linux-audit
