From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: buffer space Date: Thu, 27 Aug 2009 13:32:20 -0400 Message-ID: <200908271332.20237.sgrubb@redhat.com> References: <200908171537.37593.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: Text/Plain; charset="iso-8859-15" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: David Flatley Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Thursday 27 August 2009 01:21:43 pm David Flatley wrote: > When auditd starts and reports an error on a line in the audit.rules, > does auditd continue to run with the rest of the rules? > Or does auditd stop waiting for a correction to the rules file? It depends on whether or not its processed a "-i" directive in the rules. If not, it stops. If so, it continues. -Steve