Somebody in the thread at some point said: > On Thursday 18 October 2007, Andy Green wrote: >> Somebody in the thread at some point said: >>>>> # Feel free to add below this line. See auditctl man page >>> # Feel free to add below this line. See auditctl man page >>> >>> -a exit,always -S chroot >>> #-a exit,always -S chdir -F obj_type=dhclient_t >>> >>> There was an error in line 27 of /etc/audit/audit.rules >>> [root@coyote audit]# vim audit.rules >> I would just delete everything after the "feel free" comment and retry. >> Back up the file first if you like. >> >> -Andy > > Which, except for line 15, I've done, but surely those weren't put in there by > someone just to annoy me, even if I am easily annoyed in my "golden years"... -a exit,always -S chroot doesn't appear in my working file... actually deleting them may conceivably be different from commenting them as well. Is there a particular reason you're fond of that -a exit,always -S chroot line? -Andy
