Many rules one one line
Mont Rothstein
mont.rothstein at gmail.com
Mon Apr 3 22:43:41 UTC 2006
Is there any reason not to put many rules on one line in audit.rules?
Ex:
-a exit, always -S creat -S open -S truncate -S truncate64 -S ftruncate -S
ftruncate64 -S unlink -S link -S symlink -S rename -S mkdir -S rmdir -F
devmajor=253 -F devminor=1
Thanks,
-Mont
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20060403/f86dd03d/attachment.htm>
More information about the Linux-audit
mailing list