On Thursday 10 January 2008 12:41:00 Steve Grubb wrote: > And add a field at the end "res=1" since this doesn't appear to be able to > fail.
Actually, I don't think this one is needed since its an ANOM event. They should be true always. I guess we just need a test of audit_enabled added. Thanks, -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
