Re: Adding a key to syscall rules
On Monday 02 May 2005 12:06, Timothy R. Chavez wrote:
I like this idea, it certainly doesn't hurt to have.
Its basically adding something thats in filesystem auditing to syscall to get
symmetry back. Its out of balance now.
What's your time frame for introducing new functionality to
auditctl?
Probably later this week. I'm planning to release 0.7.3 today or tomorrow
morning with your filesystem list patch + a few more things implemented in
ausearch.
-Steve