Re: filtering by auid
On Wednesday 22 June 2005 02:57, David Woodhouse wrote:
(I'm not sure if 'user' is the name that Steve actually
chose when
adding this functionality to auditctl, but I strongly suspect that'll be
the case.)
Correct. I documented it in the man page as well.
-Steve