"-F missing operation for auid" error with auditctl
Issue
- We would like to add a rule from /usr/share/doc/audit-2.x/stig.rules using the command line tool auditctl
- When we copy and paste the rule we get an error
[root@localhost ~]# auditctl -a exit,always -F arch=b32 -S fchmodat -F auid>=500 -F auid!=4294967295 \ -k perm_mod
-F missing operation for auid
Environment
- Red Hat Enterprise Linux (All Versions)
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Close
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.