Changeset 186

Show
Ignore:
Timestamp:
04/24/08 13:49:21 (7 months ago)
Author:
slawrence
Message:

-F success does not work on audit file watches. Remove them from the audit rules.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/RHEL4/kickstart/clip.ks

    r185 r186  
    693693## all system administration actions 
    694694cat <<-EOF >> /etc/audit.rules 
    695         -w /var/log/audit/ -F success=0 
     695        # This line could be the cause of problems with filling audit logs and preventing system usage after installation 
     696        -w /var/log/audit/ 
    696697        -w /etc/auditd.conf 
    697698        -w /etc/audit.rules 

  • trunk/RHEL5.1/kickstart/clip.ks

    r185 r186  
    661661cat <<-EOF >> /etc/audit/audit.rules 
    662662        -w /bin/login -p x 
    663         -w /bin/logout -F success=0 
     663        -w /bin/logout -p x 
    664664EOF 
    665665 
    …… 
    704704## all system administration actions 
    705705cat <<-EOF >> /etc/audit/audit.rules 
    706         -w /var/log/audit/ -F success=0 
     706        # This line could be the cause of problems with filling audit logs and preventing system usage after installation 
     707        -w /var/log/audit/ 
    707708        -w /etc/auditd.conf 
    708709        -w /etc/audit 

  • trunk/RHEL5/kickstart/clip.ks

    r185 r186  
    652652cat <<-EOF >> /etc/audit/audit.rules 
    653653        -w /bin/login -p x 
    654         -w /bin/logout -F success=0 
     654        -w /bin/logout -p x  
    655655EOF 
    656656 
    …… 
    695695## all system administration actions 
    696696cat <<-EOF >> /etc/audit/audit.rules 
    697         -w /var/log/audit/ -F success=0 
     697        # This line could be the cause of problems with filling audit logs and preventing system usage after installation 
     698        -w /var/log/audit 
    698699        -w /etc/auditd.conf 
    699700        -w /etc/audit