From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: Logging failed open() calls on /var/log/audit/audit.log Date: Tue, 27 Jun 2006 17:21:05 -0400 Message-ID: <200606271721.05626.sgrubb@redhat.com> References: <20060627211553.GA11601@zk3.dec.com> Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20060627211553.GA11601@zk3.dec.com> Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Tuesday 27 June 2006 17:15, Amy Griffis wrote: > If you would like to see a record in this case, you must add a watch > for /var/log/audit. I don't see a record watching this either. -Steve