Re: audit system still audits auditd
On Wednesday 15 June 2005 18:56, Steve Grubb wrote:
I was doing a test:
auditctl -a entry,always -S all -F auid=-1
It turns out this tends to report auditd doing things:
This is now in bugzilla:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160654
-Steve