Bad Rule?

warron.french warron.french at gmail.com
Thu Jul 8 19:33:47 UTC 2021


Ok, thanks. I was supposed to use "dir=" though according to the rules
directed to me.

--------------------------
Warron French



On Thu, Jul 8, 2021 at 3:05 PM Steve Grubb <sgrubb at redhat.com> wrote:

> On Thursday, July 8, 2021 2:46:40 PM EDT Richard Guy Briggs wrote:
> > On 2021-07-08 13:33, warron.french wrote:
> > > Ah! that was a typo in my email typing, since I could not copy paste
> from
> > > where the syntax was to my email I was typing.
> >
> > Could it be you are trying to add a directory with a path field?
>
> That's not exactly a problem if you intend to watch the directory itself.
> Placing a watch with dir does not actually include changes to entries in
> the
> dirtectory itself, but rather the files contained by it.
>
> -Steve
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20210708/8ebdbc8b/attachment.htm>


More information about the Linux-audit mailing list