Re: Auditd doesn't receive syscalls after installation for the current shell.

Rinat Gadelshin <[email protected]> Wed, 24 May 2023 22:12:16 +0300
Newsgroups com.redhat.linux-audit,org.kernel.vger.audit
Message-ID <[email protected]>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=