Bugs in audit tables - Linux-audit - Linux-Audit List Archives

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Bugs in audit tables

audit 1.7.10 released

Auditd and syslog.

Loredan Stancu

Monday, 8 December 2008 Mon, 8 Dec '08

2:21 a.m.

Hi Steve! I found another bugs in audit tabel: 1. No rules can be added to exclude,user,entry,task tables. 2. action 'never' can't be set. I tested with audit version 1.7.9 on gentoo system. kernel version 2.6.26-gentoo-r3 - Loredan

Reply

Show replies by date

Steve Grubb

Monday, 8 December Mon, 8 Dec

9:28 a.m.

On Monday 08 December 2008 03:21:06 am Loredan Stancu wrote:

I found another bugs in audit tabel: 1. No rules can be added to exclude,user,entry,task tables.

Can you give examples of what you get when you do them by hand? IOW, try something like: auditctl -a always,exclude -m avc

2. action 'never' can't be set.

Again, I can't help unless I see what you are getting. These all work fine on my system. -Steve

Reply

Steve Grubb

Thursday, 11 December Thu, 11 Dec

9:04 a.m.

On Monday 08 December 2008 03:21:06 am Loredan Stancu wrote:

I found another bugs in audit tabel: 1. No rules can be added to exclude,user,entry,task tables. 2. action 'never' can't be set.

I tightened up the parsing for -m and -w auditctl options. This was fixed as svn commit 202. Thanks for reporting the problem. -Steve

Reply

5855

days inactive

5858

days old

linux-audit@lists.linux-audit.osci.io

Manage subscription

2 comments

2 participants

tags (0)

participants (2)

Loredan Stancu
Steve Grubb