Setting priority to auditd rule files
Anurag Aggarwal <[email protected]> Mon, 30 Jan 2023 10:51:53 +0530
| Newsgroups | com.redhat.linux-audit |
|---|---|
| Message-ID | <CAPoNrtu5eH8aPWkRTK+GkgddF=f_SVF3Pfi+WuHMafFxSdGTgw@mail.gmail.com> |
Hello All, As per my understanding, currently auditd picks up rule files as per alphabetical order. Is there a way to force auditd to prioritize which rule file should be first read and applied, other than renaming it as 000-<app>.rules and hoping that customers don't have anything lexicographically smaller than this? -- Anurag Aggarwal -- Linux-audit mailing list [email protected] https://listman.redhat.com/mailman/listinfo/linux-audit