Changing 'audit.rules' Gets Overriden To The Default Ruleset When the auditd(8) Service Is Restarted
(Doc ID 2531763.1)
Last updated on MARCH 18, 2022
Applies to:
Linux OS - Version Oracle Linux 7.0 and laterLinux x86-64
Symptoms
Custom audit rules added to the /etc/audit/audit.rules file are overwritten when the audit daemon auditd(8) is restarted.
Changes
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Symptoms |
Changes |
Cause |
Solution |