USER messages - default behavior

Debora Velarde dvelarde at us.ibm.com
Thu Jun 16 18:46:39 UTC 2005







> On Thursday 16 June 2005 14:21, Steve Grubb wrote:
> > You could also do "-a exit,never -F auid=<auid>"

> Of course substituting the new list name for exit.

Perhaps I missed something.  What 'new list name for exit'?
I'm on audit0.9.4 where entry and exit are still valid.
Is this different in a more recent audit?

-debbie
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20050616/714254ea/attachment.htm>


More information about the Linux-audit mailing list