type=SYSCALL, key= field?

Michael C Thompson thompsmc at us.ibm.com
Mon Jul 31 18:09:56 UTC 2006


Hey all,

I'm looking though the audit logs, and I'm wondering what exactly this 
key field is in the SYSCALL audit record. I've always seen its value be 
(null).

I'm not sure what this is meant to be related to, any clues?

Thanks,
Mike




More information about the Linux-audit mailing list