11.31 auditing bug

[Court Campbell]

I am probably 1 of maybe 20 people that have to use the auditing subsystem. But here is my issue. Auditing for 11.31 has changed -- it now supports multiple threads. And it will create a directory with multiple files for each thread. Anyway, there is a parameter in /etc/rc.config.d/ auditing called NTHREADS. If you set it to 0 then it works in in a sort of compatibility mode where it writes to a file instead if a directory with an associated file(s). If you are familiar with auditing you'll understand what I am saying.

Well, I made the change and it did not work as expected. I looked at /sbin/init/d/auditing and I don't even see a reference to NTHREADS. I am curious if I am missing something or if HP forgot to add it to the script?

NOTE: I was able to work around the issue by editing /etc/audit/audnames. There is a line in that file that is associated with NTHREADS.