Many rules one one line

Mont Rothstein mont.rothstein at gmail.com
Mon Apr 3 22:43:41 UTC 2006


Is there any reason not to put many rules on one line in audit.rules?

Ex:
-a exit, always -S creat -S open -S truncate -S truncate64 -S ftruncate -S
ftruncate64 -S unlink -S link -S symlink -S rename -S mkdir -S rmdir -F
devmajor=253 -F devminor=1

Thanks,
-Mont
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20060403/f86dd03d/attachment.htm>


More information about the Linux-audit mailing list