Syscall issues with Audit 1.0.14 and linux 2.6.9-42.0.10

Walt Powell wpowell9 at columbus.rr.com
Tue Mar 20 20:52:46 UTC 2007


All:

When using linux kernel-smp-2.6.9-42.0.10.EL and audit-1.0.14-1.EL

In the audit.rules files

-a entry, always -S chmod

errors out.  Does not recognize 'chmod'.

It works in kernel-smp-2.6.9-42.EL given the same audit rpm

Is the syscalls list for 2.6.9-42.0.10.EL radically different, and if so, is there a list of the syscalls available for audit somewhere?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20070320/4e1c22be/attachment.htm>


More information about the Linux-audit mailing list