Open rgbriggs opened 4 years ago
The SOCKADDR record is missing when mandatory messages such as audit configuration changes are generated when there are no rules present to cancel audit_dummy_context.
Post v1 https://www.redhat.com/archives/linux-audit/2020-July/msg00009.html
The SOCKADDR record is missing when mandatory messages such as audit configuration changes are generated when there are no rules present to cancel audit_dummy_context.