On Tue, 2008-08-12 at 12:49 -0500, Jonathan Kelly wrote:
 Hello,
 
  
 
 When using the python auparse library to call
 AuParser.interpret_field() on a multi-word field, only the first word
 in the field is returned.  Using get_field_str() instead of
 interpret_field() yields the same output.  I have verified that this
 issue exists in the C library, as well as the Python.  I suspect that
 this may be an issue for multi-word fields in general, but have not
 noticed any other than 'op'.
 
   
Line forms here...see the following thread:
https://www.redhat.com/archives/linux-audit/2008-June/msg00005.html
LCB.
-- 
LC (Lenny) Bruzenak
lenny(a)magitekltd.com