From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: Audit rules keys Date: Tue, 21 Aug 2007 12:46:14 -0400 Message-ID: <200708211246.15230.sgrubb@redhat.com> References: <6F2A8C9C4C5BE446A17B745BBC856EEB5A6D39@XMBTX113.northgrum.com> <200708211155.46686.sgrubb@redhat.com> <6F2A8C9C4C5BE446A17B745BBC856EEB5A6D3A@XMBTX113.northgrum.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <6F2A8C9C4C5BE446A17B745BBC856EEB5A6D3A@XMBTX113.northgrum.com> Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: "Henning, Arthur C. (CSL)" Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Tuesday 21 August 2007 12:09:28 Henning, Arthur C. (CSL) wrote: > Would appear the system-config-audit GUI is rewriting the entire rule file > then complaining it's not configured correctly. Yes its re-writing the rules. But its probably auditctl that's complaining. Thanks for the feedback on this tool. I believe this is the first we've had so far. This tool is available for Fedora, but I have not enabled it on RHEL yet. -Steve