On Aug 16, 2007, at 12:07 PM, Dan O'Donnell wrote:
/var/audit/
/var/audit is where the audit files are kept, but it doesn't identify
the current file. While looking for a file ending in
"not_terminated" will work most of the time, if a machine crashes,
there will be multiple audit files with this ending. Listing the
files and taking the most recently accessed one should generally
work. I was just hoping for a simpler and more robust solution.
Todd
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
