Public bug reported:
auditd seems to ignore rules on /proc set in /etc/audit/rules.d/
cat /etc/audit/rules.d/10-test.rules
-w /proc -p wa -k test_proc
auditctl -l
No rules
distro = jammy
auditd version = 1:3.0.7-1build1
Workarounds:
1- use auditctl to either define audit rules or read the r
Public bug reported:
auditd seems to ignore rules on /proc set in /etc/audit/rules.d/
cat /etc/audit/rules.d/10-test.rules
-w /proc -p wa -k test_proc
auditctl -l
No rules
distro = jammy
auditd version = 1:3.0.7-1build1
Workarounds:
1- use auditctl to either define audit rules or read the r
Public bug reported:
auditd seems to ignore rules on /proc set in /etc/audit/rules.d/
cat /etc/audit/rules.d/10-test.rules
-w /proc -p wa -k test_proc
auditctl -l
No rules
distro = jammy
auditd version = 1:3.0.7-1build1
Workarounds:
1- use auditctl to either define audit rules or read the r
Public bug reported:
auditd seems to ignore rules on /proc set in /etc/audit/rules.d/
cat /etc/audit/rules.d/10-test.rules
-w /proc -p wa -k test_proc
auditctl -l
No rules
distro = jammy
auditd version = 1:3.0.7-1build1
Workarounds:
1- use auditctl to either define audit rules or read the r
Public bug reported:
auditd seems to ignore rules on /proc set in /etc/audit/rules.d/
cat /etc/audit/rules.d/10-test.rules
-w /proc -p wa -k test_proc
auditctl -l
No rules
distro = jammy
auditd version = 1:3.0.7-1build1
Workarounds:
1- use auditctl to either define audit rules or read the r