Sidebar 2: Audit Files

Keep an eye on your available disk space while the BSM is enabled. On a system with a heavy load or many users your dirve may fill up quite quickly. Configure the scrip audit.warn to cleanse your audit directory - this script is run every time disk space is low on your system. Before you manually try to remove any log files in /var/audit, run /etc/stop-monitor firt, then /etc/strt-monitor once you are finished. The log files will be in the format: start-time.finish-time.host, and start-time.not-terminated.host for a log file in use.