[PATCH] Audit filter rule operators (2/2)

Steve Grubb sgrubb at redhat.com
Mon Oct 24 16:26:30 UTC 2005


On Monday 24 October 2005 12:13, Timothy R. Chavez wrote:
> Do we really want to default undefined operations to AUDIT_EQUAL.  I'd
> expect an error.

This would be OK in that the default before just so happened to be =. However, 
we should do some error checking when accepting the rule, not when evaluating 
it.

-Steve




More information about the Linux-audit mailing list