Logging failed open() calls on /var/log/audit/audit.log

Steve Grubb sgrubb at redhat.com
Tue Jun 27 21:21:05 UTC 2006


On Tuesday 27 June 2006 17:15, Amy Griffis wrote:
> If you would like to see a record in this case, you must add a watch
> for /var/log/audit.

I don't see a record watching this either.

-Steve




More information about the Linux-audit mailing list