STIG issue with auditctl -l

leam hall leamhall at gmail.com
Thu Nov 20 15:42:04 UTC 2014


The RHEL 6 STIG says:

  auditctl -l | grep syscall | grep chmod

Should return lines referring to chmod. Those lines are in my
audit.rules. Just doing an:

  auditctl -l | grep syscall

Returns nothing. I've got no issues telling the STIG folks how to do
their work, but wanted to make sure I know what I'm talking about
first.

Am I missing something if there's no "syscall" line(s) returned?

Thanks!

Leam

-- 
Mind on a Mission




More information about the Linux-audit mailing list