https://bugzilla.novell.com/show_bug.cgi?id=242034 Summary: /etc/auditd.conf is not read when /sbin/auditd is started Product: openSUSE 10.2 Version: Final Platform: 32bit OS/Version: Linux Status: NEW Severity: Minor Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: seth@iscar.org QAContact: qa@suse.de According 'man auditd', /etc/auditd.conf is read when auditd is started. According to the /var/log/warn: auditd: Config file /etc/audit/auditd.conf doesn't exist, skipping It appears that /etc/audit/auditd.conf is hardcoded into /sbin/auditd Experiments with changing /etc/auditd.conf suggest that this file is not read, unless it is placed in /etc/audit/auditd.conf -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.