auditctl filter keyword: "path"

Michael C Thompson thompsmc at us.ibm.com
Thu May 25 15:30:03 UTC 2006


Hey Steve,

audit-1.2.2-2 seems to be having problems with the path filter word.

# auditctl -a exit,always -S open -F path=bfile
Error sending add rule request (Invalid argument)
# auditctl -a entry,always -S open -F path=bfile
Error sending add rule request (Invalid argument)

I'm on kernel 27... Any idea on why this would be failing?

Thanks,
Mike




More information about the Linux-audit mailing list