You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Primary open question: how to know auditd has flushed the log? I suppose I could touch a tmpfile and wait for it to roll in.
Even then that doesn't account for spooky-action-at-a distance, such as that caused by code which shoves things into a batch executor's queue. I'll make sure to note in the log that handling such is to be left as an exercise for the reader.
Checking for unexpected occurrences since the beginning of a block, over a whole file or during the entire harness run could be quite useful.
The text was updated successfully, but these errors were encountered: