From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: auditctl exit code Date: Mon, 14 May 2012 20:03:27 -0400 Message-ID: <201205142003.27834.sgrubb@redhat.com> References: <20120511122006.GA16481@kildalton> <201205111034.52259.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from x2.localnet (vpn-229-122.phx2.redhat.com [10.3.229.122]) by int-mx09.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id q4F046x2006055 for ; Mon, 14 May 2012 20:04:06 -0400 In-Reply-To: <201205111034.52259.sgrubb@redhat.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Friday, May 11, 2012 10:34:52 AM Steve Grubb wrote: > On Friday, May 11, 2012 08:20:06 AM Stephen Quinney wrote: > > I am using Linux Audit version 2.1.3 and I'm wondering if the > > following behaviour of auditctl is intentional. > > No. I think its a bug in the code. This should fix it: https://fedorahosted.org/audit/changeset/694 -Steve > > When I do a complete > > list of the current rules (with auditctl -l) I get an exit code of > > zero, as expected. When I do a list which is restricted to a > > particular key (auditctl -l -k foo) I get 255. It doesn't matter which > > of my keys I use and there are no error messages sent to stderr to > > indicate a problem. The auditctl manpage doesn't say what various exit > > values mean so I'm not sure what type of error is occurring.