Unable to filter on negative values
Michael C Thompson
mcthomps at us.ibm.com
Tue Feb 14 20:03:24 UTC 2006
Linda Knippers <linda.knippers at hp.com> wrote on 02/14/2006 12:17:47 PM:
> It seems to work with a rule like this:
> /sbin/auditctl -a exit,always -S pread64 -F success=no -F exit=9
However did you come up with that one?
>
> -- ljk
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20060214/873c1c0d/attachment.htm>
More information about the Linux-audit
mailing list