1#@!#!123s

32759 1#@!#!123s

: / usr / share / audit / sample-rules /

Filename : 70-einval.rules

back

## These are rules are to locate poorly written programs.
## Its never planned to waste time on a syscall with incorrect parameters
## This is more of a debugging step than something people should run with
## in production.
-a never,exit -F arch=b64 -S rt_sigreturn
-a always,exit -S all -F exit=-EINVAL -F key=einval-retcode