Re: audit 1.0.3 released
> I've found similar problems with the 'exit' flag and am still
> investigating.
The exit flag is compared in the kernel. Offhand I don't see a bug
with it. If
you do see something, let us know.
I've confirmed that
-F exit=0
-F exit!=0
-F exit=3
-F exit!=3
All seem to be working fine. The problem I was seeing last night was
because the return code from my syscall was different than I was originally
expecting.
-debbie
Attachments:
- attachment.html (text/html — 650 bytes)