[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Logging failed open() calls on /var/log/audit/audit.log



Steve Grubb wrote:
> On Tuesday 27 June 2006 17:15, Amy Griffis wrote:
> 
>>If you would like to see a record in this case, you must add a watch
>>for /var/log/audit.
> 
> 
> I don't see a record watching this either.

I think we're missing the directory lookup syscall(s) on watches
right now.

-- ljk


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]