2007-01-15 23:51:54 +01:00
|
|
|
## Path: System/Auditing
|
|
|
|
|
## Description: Auditing Options
|
|
|
|
|
## Type: string
|
|
|
|
|
## Default: auditd
|
|
|
|
|
## ServiceReload: auditd
|
|
|
|
|
## ServiceRestart: auditd
|
|
|
|
|
#
|
|
|
|
|
IDENT="auditd"
|
|
|
|
|
# Type: string
|
|
|
|
|
# Default: ""
|
|
|
|
|
# Add extra options here
|
|
|
|
|
EXTRAOPTIONS=""
|
|
|
|
|
#
|
|
|
|
|
## Type: string
|
|
|
|
|
## Default: "en_US"
|
|
|
|
|
#
|
|
|
|
|
# This is the locale information that audit uses. Its defaulted to en_US.
|
|
|
|
|
# To remove all locale information from audit's environment, set
|
|
|
|
|
# AUDITD_LANG to the empty string or the string "none".
|
|
|
|
|
AUDITD_LANG="en_US"
|
|
|
|
|
#
|
|
|
|
|
## Type: string
|
|
|
|
|
## Default: "yes"
|
|
|
|
|
#
|
|
|
|
|
# This option is used to determine if rules & watches should be deleted on
|
|
|
|
|
# shutdown. This is beneficial in most cases so that a watch doesn't linger
|
|
|
|
|
# on a drive that is being unmounted. If set to no, it will NOT be cleaned up.
|
|
|
|
|
AUDITD_CLEAN_STOP="yes"
|
|
|
|
|
#
|
|
|
|
|
## Type: yesno
|
|
|
|
|
## Default: yes
|
2007-10-31 12:24:11 +01:00
|
|
|
#
|
|
|
|
|
# This option disables syscall auditing by default. This can also be
|
|
|
|
|
# accomplished by auditctl -e.
|
|
|
|
|
AUDITD_DISABLE_CONTEXTS="yes"
|
