On Friday 19 September 2008 23:39:36 Peng Haitao wrote: > Use option "-a" cannot report about avc messages, when message type is > USER_AVC.
Applied. Thanks for the patch. I quit working on USER_AVCs earlier this year because the source of the AVCs were not following the conventions we had long established about encoding certain fields. I don't know the current state or how many bugs you will find. One of the APIs added in 1.7.7 should help the writers of user space AVCs to properly encode some fields. -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
