From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael C Thompson <thompsmc@us.ibm.com>
Subject: [PATCH] auditctl.8 man-page: Changed filter name from watch to path
Date: Thu, 18 May 2006 09:19:35 -0500
Message-ID: <446C8277.3070707@us.ibm.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
Received: from mx3.redhat.com (mx3.redhat.com [172.16.48.32])
	by int-mx1.corp.redhat.com (8.12.11.20060308/8.12.11) with ESMTP id
	k4IEK1xR028432
	for <linux-audit@redhat.com>; Thu, 18 May 2006 10:20:01 -0400
Received: from e2.ny.us.ibm.com (e2.ny.us.ibm.com [32.97.182.142])
	by mx3.redhat.com (8.13.1/8.13.1) with ESMTP id k4IEJj5w028626
	for <linux-audit@redhat.com>; Thu, 18 May 2006 10:19:46 -0400
Received: from d01relay04.pok.ibm.com (d01relay04.pok.ibm.com [9.56.227.236])
	by e2.ny.us.ibm.com (8.12.11.20060308/8.12.11) with ESMTP id
	k4IEJdUv008774
	for <linux-audit@redhat.com>; Thu, 18 May 2006 10:19:39 -0400
Received: from d01av03.pok.ibm.com (d01av03.pok.ibm.com [9.56.224.217])
	by d01relay04.pok.ibm.com (8.12.10/NCO/VER6.8) with ESMTP id
	k4IEJckO235426
	for <linux-audit@redhat.com>; Thu, 18 May 2006 10:19:39 -0400
Received: from d01av03.pok.ibm.com (loopback [127.0.0.1])
	by d01av03.pok.ibm.com (8.12.11/8.13.3) with ESMTP id k4IEJc1V002752
	for <linux-audit@redhat.com>; Thu, 18 May 2006 10:19:38 -0400
Received: from [127.0.0.1] (pendarric.austin.ibm.com [9.41.46.77])
	by d01av03.pok.ibm.com (8.12.11/8.12.11) with ESMTP id k4IEJbeK002716
	for <linux-audit@redhat.com>; Thu, 18 May 2006 10:19:38 -0400
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: Linux Audit <linux-audit@redhat.com>
List-Id: linux-audit@redhat.com

Below is a patch to update the auditctl man page. The list of filters 
had "watch" as a valid keyword, but as per my recent discussion with 
Steve, the keyword is "path", not "watch".

This patch updates the man-page accordingly.

Thanks,
Mike

---

Signed-off-by: Michael Thompson <thompsmc@us.ibm.com>

--- audit-1.2.2-orig/docs/auditctl.8    2006-05-12 12:58:21.000000000 -0500
+++ audit-1.2.2/docs/auditctl.8 2006-05-17 14:59:32.000000000 -0500
@@ -131,6 +131,9 @@
  .B msgtype
  This is used to match the message type number. It should only be used 
on the exclude filter list.
  .TP
+.B path
+The full path of file to watch. This can only be used on the exit 
filter list.
+.TP
  .B pers
  OS Personality Number
  .TP
@@ -166,9 +169,6 @@
  .TP
  .B uid
  User ID
-.TP
-.B watch
-Full Path of File to Watch
  .RE
  .TP
  \fB\-w\fR <path>