Hello Paul, On Tuesday, February 28, 2023 5:04:04 PM EST Paul Moore wrote: > ... if you look closely you'll notice that the #289 event (the async > URINGOP) is missing from the ausearch output.
Thanks for the bug report. Let me know if you see anything else. Upstream commit 7d35e14 should fix parsing URINGOP and DM_CTRL records. Btw, has anyone ever seen a DM_CTRL record? I don't think they are following our guidelines. -Steve -- Linux-audit mailing list Linux-audit@redhat.com https://listman.redhat.com/mailman/listinfo/linux-audit
