From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alexander Viro Subject: Re: [PATCH] audit keys: support for multiple audit keys Date: Fri, 12 Mar 2010 06:31:47 -0500 Message-ID: <20100312113147.GA4847@shell.devel.redhat.com> References: <58f704b21003100924x5ff296a1tb54a96b18ebaf20b@mail.gmail.com> <58f704b21003112344i61e9fb58v639129e13959e8b9@mail.gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Content-Disposition: inline In-Reply-To: <58f704b21003112344i61e9fb58v639129e13959e8b9@mail.gmail.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Juraj Hlista Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Fri, Mar 12, 2010 at 08:44:22AM +0100, Juraj Hlista wrote: > An audit rule can have more than 1 key, the keys can be of > different types (only AUDIT_FILTERKEY for now) > > For example, it is possible to create a rule such as: > ?? ??auditctl -a exit,always -F path=/file -F key=k1 -F key=k2 -F key=k3 > Please, resend it in readable form. As it is, patch is severely mangled by POS MUA that had turned tabs into series of U+00A0.