On Monday 07 May 2007 13:42, paul moore wrote: > Aha - it actually says "xxxx (deleted)".
That's what I thought it would say. > Which is OK I guess. But I would have thought that the unstrusted string > routine would know that this is a string generated by the kernel audit > system and so not escape it Any space in a field value will cause parsing problems. That is the main reason its escaped. -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
