key options with spaces

Steve Grubb sgrubb at redhat.com
Wed Jun 19 12:34:50 UTC 2013


On Tuesday, June 11, 2013 04:04:54 PM LC Bruzenak wrote:
> I was playing with audit rules using keys with spaces.
> Is the following expected (ignore the logic; was just testing the returns)?
> 
> # auditctl -l -k lsmod
> LIST_RULES: exit,always watch=/sbin/lsmod perm=x key=lsmod kernel
> LIST_RULES: exit,always watch=/bin/ping perm=x key=lsmod ping

What are you expecting? I can make it not accept keys with spaces. I don't 
think putting spaces in keys is a good idea.

-Steve




More information about the Linux-audit mailing list