public inbox for linux-audit@redhat.com
 help / color / mirror / Atom feed
* Audit Rules loaded without using AUDITD daemon --- Low Sensitivity/Aerospace Internal Use Only
@ 2014-04-30 19:10 Warron S French
  2014-04-30 22:26 ` Peter Moody
  2014-05-01 19:14 ` Steve Grubb
  0 siblings, 2 replies; 3+ messages in thread
From: Warron S French @ 2014-04-30 19:10 UTC (permalink / raw)
  To: linux-audit


[-- Attachment #1.1: Type: text/plain, Size: 244 bytes --]

Low Sensitivity/Aerospace Internal Use Only

Does anyone know how to load the audit rules (as written in 
/etc/audit/audit.rules) without actually using the auditd daemon?



Warron French, MBA, SCSA

Low Sensitivity/Aerospace Internal Use Only

[-- Attachment #1.2: Type: text/html, Size: 372 bytes --]

[-- Attachment #2: Type: text/plain, Size: 0 bytes --]



^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: Audit Rules loaded without using AUDITD daemon --- Low Sensitivity/Aerospace Internal Use Only
  2014-04-30 19:10 Audit Rules loaded without using AUDITD daemon --- Low Sensitivity/Aerospace Internal Use Only Warron S French
@ 2014-04-30 22:26 ` Peter Moody
  2014-05-01 19:14 ` Steve Grubb
  1 sibling, 0 replies; 3+ messages in thread
From: Peter Moody @ 2014-04-30 22:26 UTC (permalink / raw)
  To: Warron S French; +Cc: linux-audit


On Wed, Apr 30 2014 at 12:10, Warron S French wrote:
> Does anyone know how to load the audit rules (as written in 
> /etc/audit/audit.rules) without actually using the auditd daemon?

man auditctl

(-R)

Cheers,
peter

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: Audit Rules loaded without using AUDITD daemon --- Low Sensitivity/Aerospace Internal Use Only
  2014-04-30 19:10 Audit Rules loaded without using AUDITD daemon --- Low Sensitivity/Aerospace Internal Use Only Warron S French
  2014-04-30 22:26 ` Peter Moody
@ 2014-05-01 19:14 ` Steve Grubb
  1 sibling, 0 replies; 3+ messages in thread
From: Steve Grubb @ 2014-05-01 19:14 UTC (permalink / raw)
  To: Warron S French; +Cc: linux-audit

On Wed, 30 Apr 2014 15:10:50 -0400
Warron S French <Warron.S.French@aero.org> wrote:

> Low Sensitivity/Aerospace Internal Use Only
> 
> Does anyone know how to load the audit rules (as written in 
> /etc/audit/audit.rules) without actually using the auditd daemon?

Comment out the auditd line in your init script or something along
those lines.

-Steve

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2014-05-01 19:14 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-04-30 19:10 Audit Rules loaded without using AUDITD daemon --- Low Sensitivity/Aerospace Internal Use Only Warron S French
2014-04-30 22:26 ` Peter Moody
2014-05-01 19:14 ` Steve Grubb

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox