is this message necessary?
Linda Knippers
linda.knippers at hp.com
Wed Nov 9 23:15:26 UTC 2005
I just noticed the message is similarly vague when system call
rules are removed. It just says "removed an audit rule".
-- ljk
Steve Grubb wrote:
> On Wednesday 09 November 2005 18:02, Linda Knippers wrote:
>
>>I'm wondering about the usefulness of this message since it doesn't
>>identify the watch that's being removed.
>
> This denotes that a configuration change has occurred. This is needed.
>
>>If we need this message, shouldn't it identify the watch that's being
>>removed?
>
> That would be nice. In the new file system audit code, maybe we can add the
> file name?
>
> Thanks,
> -Steve
>
> --
> Linux-audit mailing list
> Linux-audit at redhat.com
> https://www.redhat.com/mailman/listinfo/linux-audit
>
More information about the Linux-audit
mailing list