Should open syscall records occur without a path record?

Steve Grubb sgrubb at redhat.com
Mon Jul 23 19:00:21 UTC 2007


On Monday 23 July 2007 14:47:33 John D. Ramsdell wrote:
> A PATH record gets ignored when another syscall event record occurs between
> the SYSCALL record and the PATH record.

OK good. That is a known problem (bz 235398) that should be worked on right 
after we get the improved dispatcher finished. 

-Steve




More information about the Linux-audit mailing list