On Friday 24 October 2008 13:08:41 LC Bruzenak wrote: > Note that the syscall is listed differently.
Interesting. > This is using the 1.7.7 code (on F9), I have not yet moved over to 1.7.8 > in case it may be fixed there. Nope...nothing was changed there to fix it. This is the first I'd heard of the problem..Can you show me the raw record? ausearch -ts today -a 10038 --raw Thanks, -Steve -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit
