Re: Sycall Rules vs Watch Rules

Richard Guy Briggs <[email protected]> Wed, 6 Sep 2023 15:58:34 -0400
Newsgroups com.redhat.linux-audit
Message-ID <[email protected]>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