Syscall issues with Audit 1.0.14 and linux 2.6.9-42.0.10
All:
When using linux kernel-smp-2.6.9-42.0.10.EL and audit-1.0.14-1.EL
In the audit.rules files
-a entry, always -S chmod
errors out. Does not recognize 'chmod'.
It works in kernel-smp-2.6.9-42.EL given the same audit rpm
Is the syscalls list for 2.6.9-42.0.10.EL radically different, and if so, is there a list
of the syscalls available for audit somewhere?
Attachments:
- attachment.html (text/html — 1.3 KB)