Horst H. von Brand escribió: > auditctl(8) solo monitorea open(2), no read(2)/write(2).
Efectivamente, pero "..rather for reads or writes, the open flags are looked at to see what permission was requested" asi que, le deberia servir igual con la opcion "-p w" -- "We have art in order not to die of the truth" - Friedrich Nietzsche Cristian Rodríguez R. Platform/OpenSUSE - Core Services SUSE LINUX Products GmbH Research & Development http://www.opensuse.org/
