2014-05-07 20:51:24 +02:00
|
|
|
# Copyright 1999-2011 Gentoo Foundation
|
|
|
|
|
# Distributed under the terms of the GNU General Public License v2
|
2015-08-21 14:22:55 +02:00
|
|
|
# $Id$
|
2014-05-07 20:51:24 +02:00
|
|
|
#
|
|
|
|
|
# This file contains the auditctl rules that are loaded immediately before the
|
|
|
|
|
# audit deamon is stopped via the initscripts.
|
|
|
|
|
# The rules are simply the parameters that would be passed
|
|
|
|
|
# to auditctl.
|
|
|
|
|
|
|
|
|
|
# auditd is stopping, don't capture events anymore
|
|
|
|
|
-D
|
|
|
|
|
|
|
|
|
|
# Disable kernel generating audit events
|
|
|
|
|
-e 0
|
|
|
|
|
|
|
|
|
|
# vim:ft=conf:
|
