From mboxrd@z Thu Jan  1 00:00:00 1970
From: Steve Grubb <sgrubb@redhat.com>
Subject: Re: auditd on nonexistent files
Date: Tue, 15 Sep 2015 10:15:03 +0100
Message-ID: <20150915101503.0dd9e4d4@ivy-bridge>
References: <55F6EF4D.7050203@sensa.is>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <55F6EF4D.7050203@sensa.is>
List-Unsubscribe: <https://www.redhat.com/mailman/options/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: =?UTF-8?B?RGF2w63DsA==?= Steinn Geirsson <dsg@sensa.is>
Cc: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

T24gTW9uLCAxNCBTZXAgMjAxNSAxNjowMToxNyArMDAwMApEYXbDrcOwIFN0ZWlubiBHZWlyc3Nv
biA8ZHNnQHNlbnNhLmlzPiB3cm90ZToKCj4gSGkgYWxsLAo+IAo+IFdoYXQgaXMgdGhlIGJlc3Qg
cHJhY3RpY2UgZm9yIHVzaW5nIGF1ZGl0ZCBmb3IgZmlsZSBpbnRlZ3JpdHkKPiBtb25pdG9yaW5n
Pwo+IAo+IEZyb20gdGhlIGRvY3VtZW50YXRpb24sIEkgaGF2ZSB0aGlzLCB3aGljaCB3b3JrcyBm
aW5lOgo+IC1hIGFsd2F5cyxleGl0IC1GIGRpcj0vYmluIC1GIHBlcm09d2EKPiAKPiBIb3dldmVy
LCBpdCBzZWVtcyB0aGF0IGlmIEkgaGF2ZSBhIHJ1bGUgb24gYSBub25leGlzdGVudCBkaXJlY3Rv
cnksCj4gYXVkaXRkIHdpbGwgZmFpbCB0byBhZGQgdGhlIHJ1bGUgKEkgYXNzdW1lIGJlY2F1c2Ug
aXQncyBhZGRpbmcgYSB3YXRjaAo+IG9uIGFuIGlub2RlIG9yIHNvbWV0aGluZyBsaWtlIHRoYXQ/
KSwgYnV0IGl0IHdpbGwgYWxzbyBqdXN0IHN0b3AKPiByZWFkaW5nIGF1ZGl0LnJ1bGVzIGFuZCBu
b3QgYWRkIGFueSBzdWJzZXF1ZW50IHJ1bGVzLgo+IAo+IFRoaXMgaXMgYmFkIGluIGFuIGVudmly
b25tZW50IHdoZXJlIHdlIGhhdmUgdG8gaGF2ZSBGSU0gZm9yIGNyaXRpY2FsCj4gYXBwbGljYXRp
b24gZmlsZXMsIGJ1dCB3aGVyZSBhbm90aGVyIHRlYW0gbWF5IGJlIG1haW50YWluaW5nIHNvbWUg
b2YKPiB0aGUgYXBwcyBhbmQgdGhlcmVmb3JlIG1pZ2h0IHJlbW92ZSBzb21lIHdhdGNoZWQgZGly
ZWN0b3JpZXMsCj4gZXNwZWNpYWxseSBhcyB0aGVpciBtaXNoYXBzIG1heSBpbXBhY3QgYXVkaXRp
bmcgZm9yIG90aGVyIHBhcnRzIG9mCj4gdGhlIHN5c3RlbS4KPiAKPiAKPiBDYW4gc29tZXRoaW5n
IGJlIGRvbmUgdG8gZ2V0IGJldHRlciBiZWhhdmlvdXIgaGVyZT8KPiAKPiBJIHNlZSB0d28gd2F5
cyBpdCBjb3VsZCBiZSBiZXR0ZXIKPiAxKSAodGhlIGlkZWFsIGNhc2UpIGF1ZGl0ZCB3aWxsIGFk
ZCBydWxlcyBldmVuIGZvciBub25leGlzdGVudAo+IGRpcmVjdG9yaWVzLCBhbmQgd2hlbiB0aGV5
IGFyZSBjcmVhdGVkIHdpbGwgYWRkIGEgd2F0Y2ggZm9yIHRoZW0uIElmIGEKPiBkaXJlY3Rvcnkg
aXMgcmVtb3ZlZCBhbmQgYW5vdGhlciBjcmVhdGVkIHdpdGggdGhlIHNhbWUgbmFtZSwgYXVkaXRk
Cj4gd2lsbCBhZGQgYSB3YXRjaCBvbiB0aGUgbmV3IGRpcmVjdG9yeS4KCldoaWNoIGtlcm5lbCBh
cmUgeW91IHVzaW5nPyBJIHdhbnQgdG8gdGhpbmsgdGhpcyB3YXMgZml4ZWQgaW4ga2VybmVscwph
cm91bmQgMi42LjM2IG9yIGxhdGVyLiBUaGlzIG9yaWdpbmFsIHByb2JsZW0gd2FzIHRoYXQgdGhl
IGF1ZGl0CndhdGNoZXMgYXJlIGJhc2VkIG9uIGlub3RpZnkgd2hpY2ggbmVlZHMgYW4gaW5vZGUu
IElmIHRoZXJlJ3Mgbm8gaW5vZGUsCnlvdSBjYW4ndCBwbGFjZSB0aGUgd2F0Y2guCgoKPiAyKSBh
dWRpdGQgc3RpbGwgY2Fubm90IGFkZCB3YXRjaGVzIHRvIG5vbmV4aXN0ZW50IGRpcmVjdG9yaWVz
LCBidXQgYQo+IGZhaWxlZCBydWxlIGFkZCBmcm9tIGF1ZGl0LnJ1bGVzIHdpbGwgYmVjb21lIGEg
d2FybmluZyByYXRoZXIgdGhhbiBhbgo+IGVycm9yIHNvIHN1YnNlcXVlbnQgd2F0Y2hlcyBzdGls
bCBnZXQgYWRkZWQuCgpDaGVjayBpbnRvIGFkZGluZyAtaSBvciAtYyBuZWFyIHRoZSB0b3Agb2Yg
eW91ciBydWxlcy4KCi1TdGV2ZQoKCj4gSSBzdXNwZWN0IDEpIGlzIG5vdCBwb3NzaWJsZSwgYnV0
IGNhbiBJIGdldCBhdWRpdGQgdG8gYmVoYXZlIGxpa2UgaW4KPiAyKT8KPiAKPiBCZXN0IHJlZ2Fy
ZHMsCj4gRGF2w63DsAo+IAoKCi0tCkxpbnV4LWF1ZGl0IG1haWxpbmcgbGlzdApMaW51eC1hdWRp
dEByZWRoYXQuY29tCmh0dHBzOi8vd3d3LnJlZGhhdC5jb20vbWFpbG1hbi9saXN0aW5mby9saW51
eC1hdWRpdA==