audit raises error when adding watch-excludes to missing executables
Issue
- When adding a watch-exclude on a missing executable and parent directory,
auditdrefuses to load the configuration. - Watch-excludes on missing executables raise
"No such file or directory"errors.
Environment
- Red Hat Enterprise Linux 7
audit<= 2.8.4-4.el7.x86_64- Sharing same rules on different systems, some having additional agents installed to be excluded from auditing
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
