From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Abhishek Gupta" Subject: problem in adding rule on the file having spaces in the name Date: Fri, 15 Feb 2008 20:59:16 +0530 Message-ID: <18436f8f0802150729p4f71e7a5p407ac9f3ee4fc16d@mail.gmail.com> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0753658659==" Return-path: Received: from mx3.redhat.com (mx3.redhat.com [172.16.48.32]) by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id m1FFTgpQ025323 for ; Fri, 15 Feb 2008 10:29:42 -0500 Received: from rv-out-0910.google.com (rv-out-0910.google.com [209.85.198.190]) by mx3.redhat.com (8.13.8/8.13.8) with ESMTP id m1FFTJkl021491 for ; Fri, 15 Feb 2008 10:29:20 -0500 Received: by rv-out-0910.google.com with SMTP id k15so546419rvb.51 for ; Fri, 15 Feb 2008 07:29:16 -0800 (PST) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com --===============0753658659== Content-Type: multipart/alternative; boundary="----=_Part_13090_16169162.1203089356131" ------=_Part_13090_16169162.1203089356131 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline I want to add a rule in audit.rules file to watch a file named "jsp doc". Note there is space between jsp and doc. How to write the rule for that in the rule file? Please suggest. I tried writing the rule in the file as -w /jsp\ doc/ -p rw also -w /jsp doc -p rw Both gives error ------=_Part_13090_16169162.1203089356131 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline I want to add a rule in audit.rules file to watch a file named "jsp doc".
Note there is space between jsp and doc.
How to write the rule for that in the rule file?
Please suggest.
I tried writing the rule in the file as
-w /jsp\ doc/ -p rw
also
-w /jsp doc -p rw
Both gives error
------=_Part_13090_16169162.1203089356131-- --===============0753658659== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============0753658659==--