Another question - audit_lost

Erich Schubert erich.schubert at gmail.com
Tue Feb 22 20:34:57 UTC 2005


Hi,
I only audit "open" and "execve" calls. I'd like to not audit the open
calls for /proc, but I can't filter these out early, it seems.

Greetings,
Erich Schubert
--
    erich@(mucl.de|debian.org)      --      GPG Key ID: 4B3A135C    (o_
  To understand recursion you first need to understand recursion.   //\
  Wo befreundete Wege zusammenlaufen, da sieht die ganze Welt für   V_/_
        eine Stunde wie eine Heimat aus. --- Herrmann Hesse




More information about the Linux-audit mailing list