auditctl filter keyword: "path"
Michael C Thompson
thompsmc at us.ibm.com
Thu May 25 15:30:03 UTC 2006
Hey Steve,
audit-1.2.2-2 seems to be having problems with the path filter word.
# auditctl -a exit,always -S open -F path=bfile
Error sending add rule request (Invalid argument)
# auditctl -a entry,always -S open -F path=bfile
Error sending add rule request (Invalid argument)
I'm on kernel 27... Any idea on why this would be failing?
Thanks,
Mike
More information about the Linux-audit
mailing list