Excluding selected CRYPTO_KEY_USER events
Richard Young
ryoung1 at us.ibm.com
Sat Jan 9 16:26:06 UTC 2016
I know I could exclude all msgtype CRYPTO_KEY_USER audit events, but would
like to exclude just specific ones.
I would like to exclude ones for a specific UID, hostname, or IP.
There are many example of how to exclude specific files, directory events,
or syscall events.
Can somebody suggest a way to suppress specific CRYPTO_KEY_USER events by
UID, hostname, or IP?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20160109/28651290/attachment.htm>
More information about the Linux-audit
mailing list