On Thursday, May 20, 2021 10:56:00 AM EDT warron.french wrote: > Does anybody know what this error means? > augenrules: -F missing operation for -k > > I cannot figure out what rule is causing this, so I need a little > more context to figure out what to look for in my *.rules files under > /etc/audit/rules.d.
It means there is no value associated with a -F name=value construct. I am thinking syslog should have the line number in the rules where this comes from. Do you a -k some where that doesn't look right? -Steve -- Linux-audit mailing list Linux-audit@redhat.com https://listman.redhat.com/mailman/listinfo/linux-audit