Bad Rule?

Steve Grubb sgrubb at redhat.com
Thu Jul 8 19:05:03 UTC 2021


On Thursday, July 8, 2021 2:46:40 PM EDT Richard Guy Briggs wrote:
> On 2021-07-08 13:33, warron.french wrote:
> > Ah! that was a typo in my email typing, since I could not copy paste from
> > where the syntax was to my email I was typing.
> 
> Could it be you are trying to add a directory with a path field?

That's not exactly a problem if you intend to watch the directory itself. 
Placing a watch with dir does not actually include changes to entries in the 
dirtectory itself, but rather the files contained by it.

-Steve





More information about the Linux-audit mailing list