Hello Paul,
On Tuesday, February 28, 2023 5:04:04 PM EST Paul Moore wrote:
... if you look closely you'll notice that the #289 event (the
async
URINGOP) is missing from the ausearch output.
Thanks for the bug report. Let me know if you see anything else.
Upstream commit 7d35e14 should fix parsing URINGOP and DM_CTRL records. Btw,
has anyone ever seen a DM_CTRL record? I don't think they are following our
guidelines.
-Steve