Enzo Matsumiya
Enzo Matsumiya
@stevegrubb got a chance to review this one? Thanks!
@stevegrubb Yes, you're right. As stated in the commit message, this only occurs with those setting combinations. Our customer simply removed the "max_log_file" line from the default auditd.conf and expected...
> I think it's time to close this out. Thanks for pointing out this issue. Do you think we should amend the documentation to better highlight the max_log_file_action = ignore...
Then --input-logs can be deprecated? :-P I'm half joking. On the non-joke half part: I'm aware of --input-logs, but recommending it to users is the same as recommending to use...
> Wouldn’t it be possible to resolve the issue with a straightforward is_pipe redesign and not touch main at all, Sure, but why not touch main? I just took the...