On Wed, May 10, 2006 at 01:29:52PM -0400, Steve Grubb wrote: > On Wednesday 10 May 2006 13:11, Klaus Weidner wrote: > > the type=IPC_SET_PERM already tells you that these are new values. How about > > simply the following: > > > > type=IPC_SET_PERM msg=audit(1146863632.117:98): qbytes=0 iuid=501 igid=0 > > mode=0 > > How about we change that to ouid & ogid ? Object user ID & Object group ID?
Good idea, less variants to worry about. -Klaus -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
