My Oracle Support Banner

Changing 'audit.rules' Gets Overriden To The Default Ruleset When the auditd(8) Service Is Restarted (Doc ID 2531763.1)

Last updated on APRIL 24, 2020

Applies to:

Linux OS - Version Oracle Linux 7.0 and later
Linux x86-64

Symptoms

Custom audit rules added to the /etc/audit/audit.rules file are overwritten when the audit daemon auditd(8) is restarted.

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.