On Tuesday 01 March 2005 18:12, Debora Velarde wrote:
There are some syscall numbers that are not known by auditctl.
Looking at it, I think that the rule goes into the kernel fine, its just a
display problem. It tries to lookup the name, but when that fails, it should
print the number instead of a blank.
Will fix it to print the number on failed lookups in next release.
-Steve