"-F missing operation for auid" error with auditctl
Issue
- We would like to add a rule from /usr/share/doc/audit-2.x/stig.rules using the command line tool auditctl
- When we copy and paste the rule we get an error
[root@localhost ~]# auditctl -a exit,always -F arch=b32 -S fchmodat -F auid>=500 -F auid!=4294967295 \ -k perm_mod
-F missing operation for auid
Environment
- Red Hat Enterprise Linux (All Versions)
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.