[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Path ignored but syscall event still logged



On Tuesday, December 20, 2011 12:55:49 PM Max Williams wrote:
> How come this event is not ignored due to the 8th rule? I think I'm missing
> something.

One piece of information is missing. The enforcement of the audit policy is done 
by the kernel. What do you get for uname -r?

-Steve


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]