audit 0.6.10 released
Steve Grubb
sgrubb at redhat.com
Thu Apr 7 14:04:19 UTC 2005
On Wednesday 06 April 2005 20:39, Chris Wright wrote:
> I'd expect that adding a rule with arch=64 on a 32bit machine would fail.
> But, arch=32/64 doesn't look like the right solution.
Right. My mistake. What I was wanting to do is treat it like syscalls. If you
type in text, it autogenerate the correct number & uses that. If you type a
number, it uses that.
No idea what this looks like. I'm still looking at detecting the elf machine
type.
-Steve
More information about the Linux-audit
mailing list