Re: ausearch --text : missing information

2017-09-18 Thread Steve Grubb
On Monday, August 21, 2017 12:01:43 PM EDT Maupertuis Philippe wrote: > Hi, > I was toying with the audit pci configuration. > I opened a root session with sudo in which I just typed C-r nss to retrieve > the command "less /etc/nsswitch.conf" from the bash_history. The text > format, as shown below

ausearch --text : missing information

2017-08-21 Thread Maupertuis Philippe
Hi, I was toying with the audit pci configuration. I opened a root session with sudo in which I just typed C-r nss to retrieve the command "less /etc/nsswitch.conf" from the bash_history. The text format, as shown below, doesn't handle correctly the tty_audit information. Is it a known limitatio