On Thu, May 18, 2017 at 1:21 PM, Richard Guy Briggs wrote:
> Add the operation performed (register or replace) to the NETFILTER_CFG and
> NETFILTER_CFGSOLO records.
>
> Here are sample records for accompanied:
> type=NETFILTER_CFG msg=audit(1494981627.248:9764): op=replace
Add the operation performed (register or replace) to the NETFILTER_CFG and
NETFILTER_CFGSOLO records.
Here are sample records for accompanied:
type=NETFILTER_CFG msg=audit(1494981627.248:9764): op=replace family=7
table=broute entries=0
and unaccompanied cases:
type=UNKNOWN[1331]