Starting with Steve's audit userspace v3.1, an euid exclude filter no longer results in an error. Adjust the test accordingly.
Signed-off-by: Paul Moore <p...@paul-moore.com> --- tests/filter_exclude/test | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/filter_exclude/test b/tests/filter_exclude/test index 7a8e3fb..248fc54 100755 --- a/tests/filter_exclude/test +++ b/tests/filter_exclude/test @@ -103,7 +103,7 @@ $result = system("auditctl -a exclude,always -F ppid=$ppid >/dev/null 2>&1"); ok( $result ne 0 ); system("auditctl -d exclude,always -F ppid=$ppid >/dev/null 2>&1"); $result = system("auditctl -a exclude,always -F euid=$euid >/dev/null 2>&1"); -ok( $result ne 0 ); +ok( $result, 0 ); system("auditctl -d exclude,always -F euid=$euid >/dev/null 2>&1"); $result = system("auditctl -a exclude,always -F obj_user=$obj_user >/dev/null 2>&1"); -- 2.39.1 -- Linux-audit mailing list Linux-audit@redhat.com https://listman.redhat.com/mailman/listinfo/linux-audit