* make auditd persistent?
@ 2009-09-15 22:27 LC Bruzenak
2009-09-16 18:13 ` Steve Grubb
0 siblings, 1 reply; 2+ messages in thread
From: LC Bruzenak @ 2009-09-15 22:27 UTC (permalink / raw)
To: Linux Audit
Steve (or anyone),
Has there been any discussion about an option to make the auditd
unkillable? If it was already touched on the list, I apologize - I lost
the old emails.
Thx,
LCB.
--
LC (Lenny) Bruzenak
lenny@magitekltd.com
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: make auditd persistent?
2009-09-15 22:27 make auditd persistent? LC Bruzenak
@ 2009-09-16 18:13 ` Steve Grubb
0 siblings, 0 replies; 2+ messages in thread
From: Steve Grubb @ 2009-09-16 18:13 UTC (permalink / raw)
To: linux-audit
On Tuesday 15 September 2009 06:27:55 pm LC Bruzenak wrote:
> Has there been any discussion about an option to make the auditd
> unkillable?
No there hasn't. It has an immutable mode which will cause audit events to go
to syslog in the event that auditd is stopped or crashes.
-Steve
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2009-09-16 18:14 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2009-09-15 22:27 make auditd persistent? LC Bruzenak
2009-09-16 18:13 ` Steve Grubb
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.