Is there a reason not to include /var/log/audit/audit.log in the
Yes, CAPP has requirements that all audit failures be handled appropriately.
This includes an error rotating logs. The audit daemon handles its own log
Hope this helps...
Yahoo! Mail - PC Magazine Editors' Choice 2005