From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael C Thompson Subject: type=SYSCALL, key= field? Date: Mon, 31 Jul 2006 13:09:56 -0500 Message-ID: <44CE4774.80304@us.ibm.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Return-path: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Linux Audit , Steve Grubb List-Id: linux-audit@redhat.com Hey all, I'm looking though the audit logs, and I'm wondering what exactly this key field is in the SYSCALL audit record. I've always seen its value be (null). I'm not sure what this is meant to be related to, any clues? Thanks, Mike