Linda Knippers <linda.knippers@hp.com> wrote on 02/14/2006 12:17:47 PM:

> It seems to work with a rule like this:
> /sbin/auditctl -a exit,always -S pread64 -F success=no -F exit=9

However did you come up with that one?

>
> -- ljk
>