Hello Steve, The error message of "-1" is "-F missing = for ...". The opration isnot only "=". So I think "F missing opration for" is better. Signed-off-by: Zhang Xiliang <zhangxiliang(a)cn.fujitsu.com&gt; --- src/auditctl.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/src/auditctl.c b/src/auditctl.c index 3958afb..a19bd14 100644 --- a/src/auditctl.c +++ b/src/auditctl.c @@ -747,7 +747,7 @@ static int setopt(int count, char *vars[]) audit_permadded = 1; break; case -1: - fprintf(stderr, "-F missing = for %s\n", + fprintf(stderr, "-F missing opration for %s\n", optarg); retval = -1; break;