From mboxrd@z Thu Jan  1 00:00:00 1970
From: Bill Tangren <bjt@aa.usno.navy.mil>
Subject: rotating audit logs
Date: Tue, 13 Feb 2007 10:31:30 -0500
Message-ID: <45D1D9D2.70706@aa.usno.navy.mil>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
Received: from mx1.redhat.com (mx1.redhat.com [172.16.48.31])
	by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id l1DFVYQ1008278
	for <linux-audit@redhat.com>; Tue, 13 Feb 2007 10:31:34 -0500
Received: from beatrix.usno.navy.mil (beatrix.usno.navy.mil [198.116.61.254])
	by mx1.redhat.com (8.13.1/8.13.1) with ESMTP id l1DFVVg9017765
	for <linux-audit@redhat.com>; Tue, 13 Feb 2007 10:31:31 -0500
Received: from [10.1.5.58] (mach2.usno.navy.mil [10.1.5.58])
	by aa.usno.navy.mil (Postfix) with ESMTP id 93862903EF
	for <linux-audit@redhat.com>; Tue, 13 Feb 2007 10:31:30 -0500 (EST)
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: Linux Audit <linux-audit@redhat.com>
List-Id: linux-audit@redhat.com

I am required to rotate the audit logs daily on my RHEL boxes. As far as I can 
tell from the auditd.conf file, the auditd daemon only rotates the files when 
max_log_file reaches a certain size.

Is is possible to have the auditd daemon rotate the logs according to time, 
rather than size?

If auditd cannot do this, is it possible to turn off log rotating and let the 
logrotate daemon do it?

Thanks,

Bill Tangren