On Thursday, January 12, 2012 09:45:59 AM Max Williams wrote: > Sorry to bug you but is this issue I'm having a bug or have I made a > mistake in the rules? Is there another way I could exclude this directory > from auditd?
Looking back at the original... /naab1/serial/data/dir1/serial/dir2/abc_load/temp/some-app/.WORK- serial/1568280a-4eef7e3f-3873 Are there any mount points in that path? Or any symlinks pointing to other disk devices? Thanks, -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
