I see that this was discussed in the upstream mailing list: https://www.redhat.com/archives/linux-audit/2012-March/msg00009.html
It looks like these changes were released upstream as part of audit 2.2.1: https://fedorahosted.org/audit/changeset/682/trunk/src/auditctl.c https://fedorahosted.org/audit/changeset/684/trunk/src/auditctl.c https://fedorahosted.org/audit/changeset/687/trunk/src/auditctl.c ** Changed in: audit (Ubuntu) Importance: Undecided => Low ** Changed in: audit (Ubuntu) Status: New => Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/957519 Title: auditctl uses wrong syscall to determine uid To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/audit/+bug/957519/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
