On Tue, 2008-08-12 at 12:49 -0500, Jonathan Kelly wrote:
Hello,
When using the python auparse library to call
AuParser.interpret_field() on a multi-word field, only the first word
in the field is returned. Using get_field_str() instead of
interpret_field() yields the same output. I have verified that this
issue exists in the C library, as well as the Python. I suspect that
this may be an issue for multi-word fields in general, but have not
noticed any other than 'op'.
Line forms here...see the following thread:
https://www.redhat.com/archives/linux-audit/2008-June/msg00005.html
LCB.
The line started a while ago ...