Hey all, So if I have the following two rules, what should be expected behaviour?
auditctl -a entry,always -S chmod auditctl -a exclude,always -S all ... Assume we can change the ordering. Thanks, Mike -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
