#2 augrok update: handle success/failure similar to ausearch

closed
nobody
None
5
2006-12-01
2006-08-17
No

ausearch works differently in 1.0.12 (not sure when
the change was introduced), it searches msg='...'
fields to determine if operations are successful or
not, instead of only looking at the success=... field.

Try to replicate the ausearch behavior for the
-sv=yes no search. The preferred solution would be to
fix the audit record format, but that patch would be
rather large.

Discussion

  • Matt Anderson

    Matt Anderson - 2006-12-01
    • status: open --> closed
     

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:





No, thanks