[EMAIL PROTECTED] (John D. Ramsdell) writes: > I carefully studied the output of my analysis program, and found one > particularly odd line of output. I traced it back to an interesting > audit event in the raw log (syscall 5 is the open system call):
I found the place in the source for the program that generates this system call. It is a call to freopen on stderr. John -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit
