From mboxrd@z Thu Jan  1 00:00:00 1970
From: Steve Grubb <sgrubb@redhat.com>
Subject: Re: auditctl exit code
Date: Fri, 11 May 2012 10:34:52 -0400
Message-ID: <201205111034.52259.sgrubb@redhat.com>
References: <20120511122006.GA16481@kildalton>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <20120511122006.GA16481@kildalton>
List-Unsubscribe: <https://www.redhat.com/mailman/options/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

On Friday, May 11, 2012 08:20:06 AM Stephen Quinney wrote:
> I am using Linux Audit version 2.1.3 and I'm wondering if the
> following behaviour of auditctl is intentional. 

No. I think its a bug in the code.

-Steve

> When I do a complete
> list of the current rules (with auditctl -l) I get an exit code of
> zero, as expected. When I do a list which is restricted to a
> particular key (auditctl -l -k foo) I get 255. It doesn't matter which
> of my keys I use and there are no error messages sent to stderr to
> indicate a problem. The auditctl manpage doesn't say what various exit
> values mean so I'm not sure what type of error is occurring.
> 
> 
> Stephen Quinney