On Monday 23 July 2007 14:47:33 John D. Ramsdell wrote: > A PATH record gets ignored when another syscall event record occurs between > the SYSCALL record and the PATH record.
OK good. That is a known problem (bz 235398) that should be worked on right after we get the improved dispatcher finished. -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
