-a task,always audits everything

[Matthew Booth]

I added the following to audit.rules in RHEL4 U4 x86_64:

-a task,always

I expected this to have a similar effect to auditing the fork, vfork and
clone system calls. However, it seems to either audit everything itself,
or cause all the filtering to be removed from my other audit rules
(which audit pretty much everything).

Is this expected behaviour, or a bug?

Thanks,

Matt
-- 
Red Hat, Global Professional Services

M:       +44 (0)7977 267231
GPG ID:  D33C3490
GPG FPR: 3733 612D 2D05 5458 8A8A 1600 3441 EA19 D33C 3490
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20070221/7c50fa9b/attachment.sig>