Re: filtering system calls with auid -1

On Wednesday, November 18, 2015 03:54:58 PM ocakan wrote: > Hello Steve! > > Thank you for your feedback. Somehow I still do not fully understand how > the filtering with -F works. > > Regarding your questions: commands executed by root user, including > subshells, subcmds from script are fine fo

Re: filtering system calls with auid -1

Hello Steve! Thank you for your feedback. Somehow I still do not fully understand how the filtering with -F works. Regarding your questions: commands executed by root user, including subshells, subcmds from script are fine for me. I altered my audit.rules as you suggested to the following, no ot