[redhat-lspp] auditing under lspp

[Debora Velarde]

> 
> Hi.
> 
> More of a general suggestion.. should we introduce long opts?  As it
> stands right
> now, the more advanced auditctl becomes the less intuitive the command 
line
> options become.  Not only are we running out of useful letters, 
> we're also using
> both lower and upper case characters to delineate opts.  To make matters 
worse
> we're now (or so it seems) introducing opt namespaces... ACK!!!!!!! 
> 
> Way to confusing.  This is why I think we should introduce long 
> opts.  When a user
> types "man auditctl" they should then see something like --filter (-
> F) and instantly 
> know what -F does and be given the option to use --filter, so there 
> command line
> argument, if they so choose, looks sane and readable.  And besides, 
> for a robust
> tool, it almost seems mandatory that long opt support is there.
> 
> -tim
> 
> --
> redhat-lspp mailing list
> redhat-lspp at redhat.com
> https://www.redhat.com/mailman/listinfo/redhat-lspp

I would like to see common naming between auditctl and ausearch.
Currently, to filter on Group ID in auditctl, one uses 'gid'.
But on ausearch, you search for group id with '-gi'.

-debbie-