Comando equivalente

[Cristian Rodríguez]

Horst H. von Brand escribió:

> auditctl(8) solo monitorea open(2), no read(2)/write(2).

Efectivamente, pero "..rather for reads or writes, the open flags  are
looked at to see what permission was requested" asi que, le deberia
servir igual con la opcion "-p w"




-- 
"We have art in order not to die of the truth" - Friedrich Nietzsche

Cristian Rodríguez R.
Platform/OpenSUSE - Core Services
SUSE LINUX Products GmbH
Research & Development
http://www.opensuse.org/