Stephen Smalley wrote:
On 09/10/2013 03:04 PM, Joshua Brindle wrote:
Stephen Smalley wrote:
<snip>
I uploaded but will try to figure out what is going on and update.
Can you attach your audit.rules?
Attached.
Installed it via adb push audit.rules /data/local/tmp
followed by adb shell su 0 cp /data/local/tmp/audit.rules
/data/misc/audit
followed by adb shell su 0 chown audit /data/misc/audit/audit.rules
Looks like there are some spacer after the permissions on the first
line. If you delete those, does it work? I can add a ' ' case to the
permission parser, though I'm surprised since I'd expect strsep() to
take care of that.
Actually, if I strip the trailing whitespace, I get the error on both lines.
I/auditd ( 119): Starting up
I/audit_log( 119): Previous audit logfile detected, rotating
E/audit_rules( 119): -w /data/system -p wa
E/audit_rules( 119): Unknown permission
E/audit_rules( 119): -w /data/security -p wa
E/audit_rules( 119): Unknown permission
Out of curiosity, was it saved on Windows? It looks like CR also causes
it (I only stripped out the last byte, assuming only an LF would be there).
--
This message was distributed to subscribers of the seandroid-list mailing list.
If you no longer wish to subscribe, send mail to [email protected] with
the words "unsubscribe seandroid-list" without quotes as the message.
