On 09/10/2013 03:04 PM, Joshua Brindle wrote: > Stephen Smalley wrote: > <snip> >>> I uploaded but will try to figure out what is going on and update. >>> >>> Can you attach your audit.rules? >> >> Attached. >> Installed it via adb push audit.rules /data/local/tmp >> followed by adb shell su 0 cp /data/local/tmp/audit.rules >> /data/misc/audit >> followed by adb shell su 0 chown audit /data/misc/audit/audit.rules > > Looks like there are some spacer after the permissions on the first > line. If you delete those, does it work? I can add a ' ' case to the > permission parser, though I'm surprised since I'd expect strsep() to > take care of that.
Actually, if I strip the trailing whitespace, I get the error on both lines. I/auditd ( 119): Starting up I/audit_log( 119): Previous audit logfile detected, rotating E/audit_rules( 119): -w /data/system -p wa E/audit_rules( 119): Unknown permission E/audit_rules( 119): -w /data/security -p wa E/audit_rules( 119): Unknown permission -- This message was distributed to subscribers of the seandroid-list mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe seandroid-list" without quotes as the message.
