Enrico Scholz (enrico.scholz(a)informatik.tu-chemnitz.de) said:
Steve Grubb <sgrubb(a)redhat.com> writes:
> I have it as low in init priority as I can get it. It even starts before
> rsyslog. If a graphical boot does not honor the settings in the init scripts,
> what am I supposed to do? Is there another directory that I need to drop a
> file into that gets picked up by the boot sequence?
Put this into /etc/event.d/auditd
| start on starting syslog-ng
| start on starting rsyslog
| stop on stopped syslog-ng
| stop on stopped rsyslog
|
| exec /sbin/auditd -n
Note that this makes it impossible for the admin to disable if they
want to without removing the package. I would not go down this
road just yet.
Bill