audit 1.0.3 released

Debora Velarde dvelarde at us.ibm.com
Wed Aug 24 18:22:57 UTC 2005





>
> > I've found similar problems with the 'exit' flag and am still
> > investigating.
>
> The exit flag is compared in the kernel. Offhand I don't see a bug
> with it. If
> you do see something, let us know.
>

I've confirmed that
-F exit=0
-F exit!=0
-F exit=3
-F exit!=3

All seem to be working fine.  The problem I was seeing last night was
because the return code from my syscall was different than I was originally
expecting.

-debbie
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20050824/0421ecaf/attachment.htm>


More information about the Linux-audit mailing list