On Thursday 18 October 2007, Andy Green wrote: >Somebody in the thread at some point said: >> On Thursday 18 October 2007, Andy Green wrote: >>> Somebody in the thread at some point said: >>>>>> # Feel free to add below this line. See auditctl man page >>>> >>>> # Feel free to add below this line. See auditctl man page >>>> >>>> -a exit,always -S chroot >>>> #-a exit,always -S chdir -F obj_type=dhclient_t >>>> >>>> There was an error in line 27 of /etc/audit/audit.rules >>>> [root@coyote audit]# vim audit.rules >>> >>> I would just delete everything after the "feel free" comment and retry. >>> Back up the file first if you like. >>> >>> -Andy >> >> Which, except for line 15, I've done, but surely those weren't put in >> there by someone just to annoy me, even if I am easily annoyed in my >> "golden years"... > >-a exit,always -S chroot > >doesn't appear in my working file... actually deleting them may >conceivably be different from commenting them as well. > >Is there a particular reason you're fond of that > >-a exit,always -S chroot > >line? > >-Andy No, it was there when I first looked and was exactly as installed by FC6 and whatever updates have been subsequently installed by smart. -- Cheers, Gene "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author) Nihilism should commence with oneself.