Per the man page, to remove a watch, do the following:<br><div class="xoopsCode"><code></code><pre> -W path<br>              Remove a watch for the file system object at path.</pre></div><br>However, I get the following:<br>
<div class="xoopsCode"><code></code><pre># auditctl -l<br>LIST_RULES: exit,always watch=/etc/hosts perm=rwa key=hosts-file<br>LIST_RULES: exit,always watch=/etc/resolv.conf perm=wa key=resolv<br># auditctl -W /etc/hosts<br>
Error sending delete rule data request (No such file or directory)</pre></div><br>What am I doing wrong?<br>