Re: force audit log rotation?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 2012-04-10 at 15:48 +0200, Dominick Grift wrote:
> On Tue, 2012-04-10 at 08:26 -0400, Dr. Michael J. Chudobiak wrote:
> > Hi all,
> > 
> > How do I force an audit.log rotation in a systemd world (F16)?
> > 
> > "service auditd rotate" no longer works, of course.
> > 
> > - Mike
> 
> This seems to work for me:
> 
> systemctl kill -s SIGUSR1 auditd.service
> 

I think that auditd.cron needs to be edited:

# diff
-u /usr/share/doc/audit-2.2.1/auditd.cron /etc/cron.hourly/auditd.cron
--- /usr/share/doc/audit-2.2.1/auditd.cron	2012-03-23 13:42:39.000000000
+0100
+++ /etc/cron.hourly/auditd.cron	2012-04-10 16:51:11.813528608 +0200
@@ -5,7 +5,9 @@
 # based on a cron job.
 ##########
 
-/sbin/service auditd rotate
+# /sbin/service auditd rotate
+systemctl kill -s SIGUSR1 auditd.service
+
 EXITVALUE=$?
 if [ $EXITVALUE != 0 ]; then
     /usr/bin/logger -t auditd "ALERT exited abnormally with
[$EXITVALUE]"




> > --
> > selinux mailing list
> > selinux@xxxxxxxxxxxxxxxxxxxxxxx
> > https://admin.fedoraproject.org/mailman/listinfo/selinux
> 
> 


--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux



[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux