summary: Test for max_log_file_action configuration parameter. description: | Bug summary: man page is unclear as to how num_logs affects keep_logs setting The test focus on log rotation capabilities of audit daemon which is configured in uditd.conf with: num_logs max_log_file max_log_file_action: ignore syslog suspend rotate keep_logs NOTE! This test usually fails on the 1st run when executed in beaker (manual run is ok) and there for it is not suitable for TIER untit this is resolved (https://bugzilla.redhat.com/show_bug.cgi?id=1176524). contact: omoris@redhat.com component: - audit test: ./runtest.sh recommend: - audit - rsyslog duration: 60m enabled: false tag: - NoTier link: - relates: https://bugzilla.redhat.com/show_bug.cgi?id=950158 - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1060674 - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1176524 - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1065067 adjust: - enabled: false when: distro < rhel-6 continue: false extra-nitrate: TC#0399257 extra-summary: /CoreOS/audit/Sanity/audit-log-rotate-test extra-task: /CoreOS/audit/Sanity/audit-log-rotate-test