Re: Relying on syscall record for information and useless key/value duplication
On Wednesday, January 11, 2012 10:00:41 PM Steve Grubb wrote:
Please, let's not go down this rat hole just yet. I'd rather
catch up on
the known bugs in the audit system like
https://bugzilla.redhat.com/show_bug.cgi?id=742562
We also have this bug:
https://www.redhat.com/archives/linux-audit/2011-December/msg00030.html
which really needs looking into more than reformatting the events.
-Steve