From mboxrd@z Thu Jan  1 00:00:00 1970
From: Steve Grubb <sgrubb@redhat.com>
Subject: Re: auditd and redhat cluster
Date: Tue, 01 Mar 2016 09:14:14 -0500
Message-ID: <3565400.JvOrmoMvUR@x2>
References: <3D2AB1326AB2974190FCE3F69401F790DB1EBF12E6@FRVDX103.fr01.awl.atosorigin.net>
	<CAHC9VhSqD_zJQG3oBvLCpXypLJiYbd6vOMDgHnMdZK7JwtqrLw@mail.gmail.com>
	<3D2AB1326AB2974190FCE3F69401F790DB1EBF1517@FRVDX103.fr01.awl.atosorigin.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <3D2AB1326AB2974190FCE3F69401F790DB1EBF1517@FRVDX103.fr01.awl.atosorigin.net>
List-Unsubscribe: <https://www.redhat.com/mailman/options/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: linux-audit@redhat.com
Cc: Maupertuis Philippe <philippe.maupertuis@worldline.com>
List-Id: linux-audit@redhat.com
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