From mboxrd@z Thu Jan  1 00:00:00 1970
From: Peter Moody <pmoody@google.com>
Subject: Re: Audit Rules loaded without using AUDITD daemon --- Low
	Sensitivity/Aerospace Internal Use Only
Date: Wed, 30 Apr 2014 15:26:37 -0700
Message-ID: <r3nzjj2bgiq.fsf@perdido.sfo.corp.google.com>
References: <OF7904EE6D.73ED71A5-ON85257CCA.0068C6EF-85257CCA.00698D7E@notes.aero.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
Received: from mx1.redhat.com (ext-mx14.extmail.prod.ext.phx2.redhat.com
	[10.5.110.19])
	by int-mx10.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP
	id s3UMQfIH016698
	for <linux-audit@redhat.com>; Wed, 30 Apr 2014 18:26:41 -0400
Received: from mail-pd0-f172.google.com (mail-pd0-f172.google.com
	[209.85.192.172])
	by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id s3UMQegG029373
	for <linux-audit@redhat.com>; Wed, 30 Apr 2014 18:26:40 -0400
Received: by mail-pd0-f172.google.com with SMTP id g10so2339485pdj.31
	for <linux-audit@redhat.com>; Wed, 30 Apr 2014 15:26:40 -0700 (PDT)
In-Reply-To: <OF7904EE6D.73ED71A5-ON85257CCA.0068C6EF-85257CCA.00698D7E@notes.aero.org>
	(Warron S. French's message of "Wed\, 30 Apr 2014 15\:10\:50 -0400")
List-Unsubscribe: <https://www.redhat.com/mailman/options/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: Warron S French <Warron.S.French@aero.org>
Cc: linux-audit@redhat.com
List-Id: linux-audit@redhat.com


On Wed, Apr 30 2014 at 12:10, Warron S French wrote:
> Does anyone know how to load the audit rules (as written in 
> /etc/audit/audit.rules) without actually using the auditd daemon?

man auditctl

(-R)

Cheers,
peter