I've been doing some testing of the recent audit cmdline patches, notably as many as the error paths as I can.
On a failure, the field is populated with null, like when key is null. However, it has quotes, should I drop the quotes... Example: Now: cmdline="(null)" key=(null) Proposed: cmdline=(null) key=(null) I noticed that tty if its null also does not have quotes. -- Respectfully, William C Roberts -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
