Hi, On Sunday 27 July 2008 20:44:17 zhangxiliang wrote: > The entry list is applied to match fields before excuting syscall. When > matching, the exit code of syscall is unknown. So the exit field should not > be used in entry list.
Looks good. Applied. I also checked the code in libaudit.c and fixed it to do the same thing. Thanks for the patch. -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
