Bug 169971 - auditd(8) does not reload rules
Summary: auditd(8) does not reload rules
Status: Open
Alias: None
Product: Base System
Classification: Unclassified
Component: bin (show other bugs)
Version: Unspecified
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-bugs (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-07-18 14:20 UTC by Shawn Webb
Modified: 2018-06-11 16:18 UTC (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Shawn Webb 2012-07-18 14:20:01 UTC 
Editing the audit_control file (and audit_user file) and restarting or syncing auditd does not reload the rules.

How-To-Repeat: 1) Start auditd: /etc/rc.d/auditd start
2) Edit /etc/security/audit_control and put a different value in for the "flags" variable (or naflags)
3) Restart auditd: /etc/rc.d/auditd restart
3.1) Or sync auditd: auditd -s
4) Watch as the new rules are not applied
Comment 1 Eitan Adler freebsd_committer freebsd_triage 2017-12-31 07:59:20 UTC 
For bugs matching the following criteria:

Status: In Progress Changed: (is less than) 2014-06-01

Reset to default assignee and clear in-progress tags.

Mail being skipped
Comment 2 Alan Somers freebsd_committer freebsd_triage 2018-06-11 16:18:33 UTC 
I've confirmed this bug.