On Tuesday 19 April 2005 11:34, Debora Velarde wrote:
# auditctl -a entry,always -F arch=64b -S open
AUDIT_LIST: entry always arch=0 syscall=open
OK I found and fixed some minor bugs. However, the main problem here is that
you need to use b64 and not 64b.
-Steve