Steve (et. al.), Has there been any talk of adding context (or another discriminator) to the exclude capability? I know we discussed this a while back but wanted to check again.
I would really like to be able to have a rule which says ignore all AVCs from subjects of type foo_bar_t. LCB -- LC (Lenny) Bruzenak -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit