ausearch

Steve Grubb sgrubb at redhat.com
Thu May 16 13:13:29 UTC 2013


On Thursday, May 16, 2013 08:52:20 AM David Flatley wrote:
> I want to have ausearch search for a specific devname. Any suggestions?

In terms of devices, ausearch as it is now can only search for terminal names. 
No one has ever asked for search for a device, so its never been added. And 
generally what is searchable in ausearch also winds up as a report type in 
aureport.

So, what would be the use case for this?

-Steve




More information about the Linux-audit mailing list