[PATCH 1/2] Audit test fix to match rest of checks, also fixed text doc

Steve Grubb sgrubb at redhat.com
Fri Jul 19 20:03:53 UTC 2013


On Friday, July 19, 2013 01:18:14 PM Andrew Gilmore wrote:
> Great! However, 1/2 of the audit checks have this same syntax, so
> should I fix all of these tests?

Please standardize on  - action,filter as documented in the auditctl man page. 
While the command will accept either as input, this has caused so much 
confusion that I will probably add a warning at some point soon and then in a 
future release reject the wrong order.

-Steve


More information about the scap-security-guide mailing list