Unix and Linux Discussions Tagged with rules |
|
Thread / Thread Starter |
Last Post |
Replies |
Views |
Forum |
|
|
|
2 |
6,913 |
Post Here to Contact Site Administrators and Moderators |
|
|
|
2 |
3,420 |
UNIX for Advanced & Expert Users |
|
|
|
1 |
283,484 |
UNIX for Beginners Questions & Answers |
|
|
|
4 |
6,396 |
Cybersecurity |
|
|
|
0 |
148,556 |
Homework & Coursework Questions |
|
|
|
1 |
2,376 |
UNIX for Dummies Questions & Answers |
|
|
|
0 |
1,228 |
Complex Event Processing RSS News |
|
|
|
0 |
2,109 |
Complex Event Processing RSS News |
|
|
|
0 |
1,585 |
Complex Event Processing RSS News |
|
|
|
0 |
1,378 |
Complex Event Processing RSS News |
|
|
|
0 |
2,269 |
Complex Event Processing RSS News |
|
|
|
0 |
1,335 |
Complex Event Processing RSS News |
|
|
|
0 |
1,382 |
Complex Event Processing RSS News |
|
|
|
0 |
1,437 |
Complex Event Processing RSS News |
|
|
|
0 |
4,839 |
Red Hat |
|
|
|
0 |
760 |
Software Releases - RSS News |
|
|
|
0 |
886 |
Software Releases - RSS News |
|
|
|
0 |
1,482 |
Complex Event Processing RSS News |
|
|
|
0 |
6,430 |
What is on Your Mind? |
|
|
|
0 |
1,214 |
Software Releases - RSS News |
|
|
|
0 |
1,579 |
Complex Event Processing RSS News |
|
|
|
5 |
2,294 |
UNIX Desktop Questions & Answers |
|
|
|
1 |
43,366 |
Post Here to Contact Site Administrators and Moderators |
|
|
|
1 |
4,810 |
IP Networking |
|
|
|
3 |
4,966 |
UNIX for Dummies Questions & Answers |
|
|
|
6 |
7,968 |
Cybersecurity |
|
|
|
2 |
7,089 |
Programming |
|
|
|
2 |
2,806 |
Post Here to Contact Site Administrators and Moderators |
|
|
|
1 |
3,434 |
Post Here to Contact Site Administrators and Moderators |
|
|
|
1 |
2,870 |
UNIX for Dummies Questions & Answers |
|
|
|
0 |
3,061 |
Post Here to Contact Site Administrators and Moderators |
AUGENRULES:(8) System Administration Utilities AUGENRULES:(8)
NAME
augenrules - a script that merges component audit rule files
SYNOPSIS
augenrules [--check] [--load]
DESCRIPTION
augenrules is a script that merges all component audit rules files, found in the audit rules directory, /etc/audit/rules.d, placing the
merged file in /etc/audit/audit.rules. Component audit rule files, must end in .rules in order to be processed. All other files in
/etc/audit/rules.d are ignored.
The files are concatenated in order, based on their natural sort (see -v option of ls(1)) and stripped of empty and comment (#) lines.
The last processed -D directive without an option, if present, is always emitted as the first line in the resultant file. Those with an
option are replicated in place. The last processed -b directive, if present, is always emitted as the second line in the resultant file.
The last processed -f directive, if present, is always emitted as the third line in the resultant file. The last processed -e directive,
if present, is always emitted as the last line in the resultant file.
The generated file is only copied to /etc/audit/rules.d, if it differs.
OPTIONS
--check
test if rules have changed and need updating without overwriting audit.rules.
--load load old or newly built rules into the kernel.
FILES
/etc/audit/rules.d/ /etc/audit/audit.rules
SEE ALSO
audit.rules(8), auditctl(8), auditd(8).
Red Hat Apr 2013 AUGENRULES:(8)