Re: audit.rules file [Was: audit 2.3 released]

Laurent Bigonville
2013-05-06T14:02:32Z

Le Mon, 06 May 2013 09:17:18 -0400,
Steve Grubb <sgrubb@redhat.com> a écrit :

> What I did in Fedora is to add a post install action like this:
>
> %post
> # Copy default rules into place on new installation
> if [ ! -e /etc/audit/audit.rules ] ; then
> cp /etc/audit/rules.d/audit.rules /etc/audit/audit.rules
> fi
>
> This way if its a new install, you get a copy of the rules and if
> there are any previously existing rules, they are not overwritten.

Thanks, yes I figured that out too, I should probably not post emails
before my 1st cup of coffee on Sunday morning :)

Cheers

Laurent Bigonville