Re: Missing "nametype" field in audit PATH records

2018-06-06 Thread Steve Grubb
On Tuesday, May 29, 2018 10:42:11 AM EDT Nimrod Ostrovsky wrote: > Hello, > > I use the latest audit-userspace version on kernel 3.0.21, and Im trying > to compile a dispatcher app for audispd. > The problem is that PATH records does not have the "nametype" field in in > this kernel version,

Missing "nametype" field in audit PATH records

2018-06-06 Thread Nimrod Ostrovsky
Hello, I use the latest audit-userspace version on kernel 3.0.21, and Im trying to compile a dispatcher app for audispd. The problem is that PATH records does not have the "nametype" field in in this kernel version, and I want to be able to distinct between "parent" PATH records and any other