On 10/04/12 14:48, Dominick Grift wrote:
This seems to work for me: systemctl kill -s SIGUSR1 auditd.service
Didn't work for me, but I modified the auditd.cron daily job to: mv /var/log/audit/audit.log /var/log/audit/audit.old touch /var/log/audit/audit.log Now as I'm not a bash guru, If I could figure a way to date audit.old* -- Regards, Frank "Jack of all, fubars" -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux