auditctl bug: load rules from file

Amy Griffis amy.griffis at hp.com
Thu Jul 28 22:36:54 UTC 2005


David, Tim,

Steve Grubb wrote:     [Tue Jul 26 2005, 05:39:41PM EDT]
> On Tuesday 26 July 2005 17:33, Amy Griffis wrote:
> > Shouldn't this be checked in kernel?
> 
> That was my preference. I don't think they wanted to do it, though. 

Is there any reason we're not checking for duplicate syscall rules on
add?

Amy




More information about the Linux-audit mailing list