2014-05-07 20:51:24 +02:00
|
|
|
# Copyright 1999-2011 Gentoo Foundation
|
|
|
|
# Distributed under the terms of the GNU General Public License v2
|
2015-08-21 14:22:55 +02:00
|
|
|
# $Id$
|
2014-05-07 20:51:24 +02:00
|
|
|
|
|
|
|
# Configuration options for auditd
|
|
|
|
# -f for foreground mode
|
|
|
|
# There are some other options as well, but you'll have to look in the source
|
|
|
|
# code to find them as they aren't ready for use yet.
|
|
|
|
EXTRAOPTIONS=''
|
|
|
|
|
|
|
|
# Audit rules file to run after starting auditd
|
|
|
|
RULEFILE_STARTUP=/etc/audit/audit.rules
|
|
|
|
|
|
|
|
# Audit rules file to run before and after stopping auditd
|
|
|
|
RULEFILE_STOP_PRE=/etc/audit/audit.rules.stop.pre
|
|
|
|
RULEFILE_STOP_POST=/etc/audit/audit.rules.stop.post
|
|
|
|
|
|
|
|
# If you want to enforce a certain locale for auditd,
|
|
|
|
# uncomment one of the next lines:
|
|
|
|
#AUDITD_LANG=none
|
|
|
|
AUDITD_LANG=C
|
|
|
|
#AUDITD_LANG=en_US
|
|
|
|
#AUDITD_LANG=en_US.UTF-8
|
|
|
|
|
|
|
|
# This option determines whether or not to call augenrules to compile the
|
|
|
|
# audit.rule file from /etc/audit/rules.d. The default is "no" so that nothing
|
|
|
|
# happens to existing rules. When setting this up, any existing rules need to
|
|
|
|
# be copied into /etc/audit/rules.d or it will be lost when audit.rule gets
|
|
|
|
# overwritten.
|
|
|
|
USE_AUGENRULES="no"
|