Filter

[List Quest]

Hi;

I need filter logs to terminal name(if tty/terminal equal none, write to
audit.log).

Example: -a entry,always -S execve -F tty!=none

But, no use tty in filter parameter list. How this?

Thank You
Best Regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20100804/5a075803/attachment.htm>