Re: Auditd doesn't receive syscalls after installation for the current shell.

Paul Moore <[email protected]> Wed, 24 May 2023 10:53:07 -0400
Newsgroups	com.redhat.linux-audit,org.kernel.vger.audit
Message-ID	<CAHC9VhThSLtni=JuStofi78=18SdH+VCUA4eGdOkbM9=J+wzLA@mail.gmail.com>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