Re: auditctl bug: load rules from file
On Thursday 28 July 2005 18:36, Amy Griffis wrote:
Is there any reason we're not checking for duplicate syscall
rules on
add?
I personally can't think of a good reason not to. If you submit a patch, I'm
sure that would help. I think fsaudit code does as I've seen messages stating
that. I think syscalls are all that's lacking.
BTW, the next auditctl release will trim the trailing '/' from paths to help
auditfs code.
-Steve