ausearch - Linux-audit - Linux-Audit List Archives

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

ausearch

Re: Rules mysteriously flushed

[PATCH] auditfilter.c: fix...

David Flatley

Thursday, 16 May 2013 Thu, 16 May '13

7:52 a.m.

I want to have ausearch search for a specific devname. Any suggestions? Thanks. David Flatley "To err is human. To really screw up requires the root password." -UNKNOWN

Reply

Show replies by date

Steve Grubb

Thursday, 16 May Thu, 16 May

8:13 a.m.

On Thursday, May 16, 2013 08:52:20 AM David Flatley wrote:

I want to have ausearch search for a specific devname. Any suggestions?

In terms of devices, ausearch as it is now can only search for terminal names. No one has ever asked for search for a device, so its never been added. And generally what is searchable in ausearch also winds up as a report type in aureport. So, what would be the use case for this? -Steve

Reply

4238

days inactive

4238

days old

linux-audit@lists.linux-audit.osci.io

Manage subscription

1 comments

2 participants

tags (0)

participants (2)

David Flatley
Steve Grubb