Link to home
Start Free TrialLog in
Avatar of Carletto
CarlettoFlag for Italy

asked on

info on audit.rules

Hi,
I'm comparing these two lines in the audit.rules files.

-a always,exit -F arch=b32 -S clock_settime -F a0=0 -k time-change

Open in new window

-a always,exit -F arch=b32 -S clock_settime -k time-change

Open in new window


Could you please tell me the what -F a0=0 stands for?
Thank you
Carlettus
ASKER CERTIFIED SOLUTION
Avatar of Carletto
Carletto
Flag of Italy image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Carletto

ASKER

no one took care