Hi everyone, What is the benefit of using the 'arch' field parameter in a syscall rule? Is it necessary? Thanks, Matt Rixon -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://listman.redhat.com/archives/linux-audit/attachments/20100927/b58d3f6a/attachment.htm>