On Tue, Jul 26, 2005 at 04:35:19PM -0400, Steve Grubb wrote:
OK, found and fixed. Will be corrected in next release.
One other item in the same vein, since auditctl doesn't make use of
command arguments (as opposed to option arguments), it would be
helpful if it would give a syntax error when they are provided. This
often happens to me:
# auditctl -a entry,always open
# auditctl -l
AUDIT_LIST: entry,always syscall=all
No watches
Thanks,
Amy