Missing "nametype" field in audit PATH records

Nimrod Ostrovsky nimrod.ostrovsky at argus-sec.com
Tue May 29 14:42:11 UTC 2018


Hello,

I use the latest audit-userspace version on kernel 3.0.21, and  Im trying
to compile a dispatcher app for audispd.
The problem is that  PATH records  does not have the "nametype" field in in
this kernel version, and I want to be able to distinct between "parent"
PATH records and any other types.

Any ideas how to solve this issue?
(Without having to upgrade the kernel)

Cheers,
Nimrod.

-- 

 <https://automotive.knect365.com/tu-auto-detroit/registration>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20180529/41996867/attachment.htm>


More information about the Linux-audit mailing list