From mboxrd@z Thu Jan  1 00:00:00 1970
From: LC Bruzenak <lenny@magitekltd.com>
Subject: Re: audit 1.7.8 released
Date: Fri, 24 Oct 2008 14:17:30 -0500
Message-ID: <1224875850.9388.43.camel@homeserver>
References: <200810221618.50940.sgrubb@redhat.com>
Mime-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <200810221618.50940.sgrubb@redhat.com>
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: Steve Grubb <sgrubb@redhat.com>
Cc: Linux Audit <linux-audit@redhat.com>
List-Id: linux-audit@redhat.com


On Wed, 2008-10-22 at 16:18 -0400, Steve Grubb wrote:
> Hi,
> 
> I've just released a new version of the audit daemon. It can be downloaded 
> from http://people.redhat.com/sgrubb/audit  It will also be in rawhide  
> soon. The Changelog is:
...
> - When apps started by audispd die, restart them if their type is always
...

Steve, 

Is there a new parameter to support this option (or a link to more info)?
What happens if there is a startup error - a tight loop? Or is there a safety timeout?

I believe when I was testing in enforcing mode I had audisp-remote die
right away from the connection policy issues. Possibly audisp-prelude as
well from the labeling on the spool files...needed due to connection
issues. :)

I will be trying to get back there ASAP and can confirm, once the policy
pieces are patched.

Thx,
LCB.

-- 
LC (Lenny) Bruzenak
lenny@magitekltd.com