Re: what's in the works
On Monday 28 March 2005 12:55, Timothy R. Chavez wrote:
The down side is if they wanted the global list of all watches (they
can get
at):
find / -type d -exec auditctl -L {} ";"
would be the way to do that -- this would take a great ammount of time (but
would be most accurate).
What happened to all those text strings that auditctl sent into the kernel to
setup the watches? Did they get discarded? It seems to me that they should
still be around and on a list of some kind.
-Steve