From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: [PATCH] Fix the bug that use option "--session Login-Session-ID" cannot search out all matched logs Date: Mon, 6 Dec 2010 11:41:11 -0500 Message-ID: <201012061141.11920.sgrubb@redhat.com> References: <4CEE18F8.3080703@cn.fujitsu.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <4CEE18F8.3080703@cn.fujitsu.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Peng Haitao Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Thursday, November 25, 2010 03:06:16 am Peng Haitao wrote: > Use option '--session Login-Session-ID' cannot search out the log which > contains the given Login Session ID and message type is MAC_POLICY_LOAD. > > For example: > # echo "type=MAC_POLICY_LOAD msg=audit(1290670949.711:413341): policy > loaded auid=0 ses=218" | ausearch --session 218 > > Signed-off-by: Peng Haitao Applied. Thanks, -Steve