Steve G wrote:
>Is there a reason not to include /var/log/audit/audit.log in the
Yes, CAPP has requirements that all audit failures be handled appropriately.
This includes an error rotating logs. The audit daemon handles its own log
Hope this helps...
Yahoo! Mail - PC Magazine Editors' Choice 2005
fedora-selinux-list mailing list
Is there something other than the size of the logfile that can be used
to cause the rotation? Would an RFE for a command to the deamon to cause
a rotation be appropriate? How about something in the config file to
tell it "daily" or similar?