audit 0.6.10 released

Steve Grubb sgrubb at redhat.com
Thu Apr 7 14:04:19 UTC 2005


On Wednesday 06 April 2005 20:39, Chris Wright wrote:
> I'd expect that adding a rule with arch=64 on a 32bit machine would fail.
> But, arch=32/64 doesn't look like the right solution.

Right. My mistake. What I was wanting to do is treat it like syscalls. If you 
type in text, it autogenerate the correct number & uses that. If you type a 
number, it uses that.

No idea what this looks like. I'm still looking at detecting the elf machine 
type.

-Steve




More information about the Linux-audit mailing list