[redhat-lspp] lspp.8 kernel released

[Steve Grubb]

On Wednesday 15 February 2006 12:52, Klaus Weidner wrote:
> I wasn't able to add filesystem watches - "auditctl -w /tmp/q" produces
> the message "error sending watch insert request (Invalid argument)", and
> "auditctl -l" claims "File system watches not supported". This is using
> audit-1.1.4-5.1; do I need a different tool?

That version of audit does not support the new message types yet. So it won't 
work. Maybe Amy has a hacked version of auditctl that she was using that you 
can test with? I might start adding some support soon.

> Other than this I haven't notices any obvious changes in behavior; "su"
> is still broken but I guess that's a policy issue.

Do you still get the Oops?

-Steve