auditctl bug: load rules from file

[Steve Grubb]

On Thursday 28 July 2005 18:36, Amy Griffis wrote:
> Is there any reason we're not checking for duplicate syscall rules on
> add?

 I personally can't think of a good reason not to. If you submit a patch, I'm 
sure that would help. I think fsaudit code does as I've seen messages stating 
that. I think syscalls are all that's lacking.

BTW, the next auditctl release will trim the trailing '/' from paths to help 
auditfs code.

-Steve