summaryrefslogtreecommitdiff
path: root/sys-process/audit/files/audit.rules.stop.pre
diff options
context:
space:
mode:
Diffstat (limited to 'sys-process/audit/files/audit.rules.stop.pre')
-rw-r--r--sys-process/audit/files/audit.rules.stop.pre16
1 files changed, 16 insertions, 0 deletions
diff --git a/sys-process/audit/files/audit.rules.stop.pre b/sys-process/audit/files/audit.rules.stop.pre
new file mode 100644
index 00000000000..7fc0d84de9b
--- /dev/null
+++ b/sys-process/audit/files/audit.rules.stop.pre
@@ -0,0 +1,16 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+#
+# This file contains the auditctl rules that are loaded immediately before the
+# audit deamon is stopped via the initscripts.
+# The rules are simply the parameters that would be passed
+# to auditctl.
+
+# auditd is stopping, don't capture events anymore
+-D
+
+# Disable kernel generating audit events
+-e 0
+
+# vim:ft=conf: