[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

exclude's effect with multiple rules



Hey all,

So if I have the following two rules, what should be expected behaviour?

auditctl -a entry,always -S chmod
auditctl -a exclude,always -S all

... Assume we can change the ordering.

Thanks,
Mike


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]