Work at SourceForge, help us to make it a better place! We have an immediate need for a Support Technician in our San Francisco or Denver office.

Close

#2 augrok update: handle success/failure similar to ausearch

closed
nobody
None
5
2006-12-01
2006-08-17
Bill O'Donnell
No

ausearch works differently in 1.0.12 (not sure when
the change was introduced), it searches msg='...'
fields to determine if operations are successful or
not, instead of only looking at the success=... field.

Try to replicate the ausearch behavior for the
-sv=yes no search. The preferred solution would be to
fix the audit record format, but that patch would be
rather large.

Discussion

  • Matt Anderson
    Matt Anderson
    2006-12-01

    • status: open --> closed