I check, all work fine :) The patch just make additional check, is really log_format set to "command" or not. If not - generate INFO or ERROR messages. So, there only one potential risk here: false positive, when "command" format will not correctly recognized (I hope, not :) . At this time I not use this format, so will be better to check this, if you do.
четверг, 20 сентября 2012 г., 4:06:00 UTC+3 пользователь JB написал: > > PAL, > > Really appreciate you looking into this. > With the logcollector no longer segfaulting, could you check whether the > linux_auditd logs are processed and rules fired correctly? > >
