From mboxrd@z Thu Jan 1 00:00:00 1970 From: Paul Whitney Subject: Crash on Audit Failure Date: Wed, 13 Jun 2007 11:46:34 -0400 Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit Return-path: Received: from mx1.redhat.com (mx1.redhat.com [172.16.48.31]) by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id l5DFlIoM009624 for ; Wed, 13 Jun 2007 11:47:18 -0400 Received: from smtpout.mac.com (smtpout.mac.com [17.250.248.177]) by mx1.redhat.com (8.13.1/8.13.1) with ESMTP id l5DFlGpr028346 for ; Wed, 13 Jun 2007 11:47:16 -0400 Received: from mac.com (smtpin04-en2 [10.13.10.149]) by smtpout.mac.com (Xserve/smtpout07/MantshX 4.0) with ESMTP id l5DFlFf3007675 for ; Wed, 13 Jun 2007 08:47:15 -0700 (PDT) Received: from jsteorts (host-65-222-148-200.d2lab.net [65.222.148.200] (may be forged)) (authenticated bits=0) by mac.com (Xserve/smtpin04/MantshX 4.0) with ESMTP id l5DFkdxP017227 for ; Wed, 13 Jun 2007 08:47:15 -0700 (PDT) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com Can someone please tell me if the audit flag option "-f" is set to 2 if the system will shutdown, freeze or provide some warning that auditing has stopped? I am trying to get RHEL 4 U4 certified and am having to prove that the system will "crash" once audit partition is full and auditing stops. Thanks, Paul Whitney Information System Solutions Paul.whitney@mac.com