Hi,
I'm comparing these two lines in the audit.rules files.
-a always,exit -F arch=b32 -S clock_settime -F a0=0 -k time-change
Open in new window
-a always,exit -F arch=b32 -S clock_settime -k time-change
Open in new window
Could you please tell me the what -F a0=0 stands for?
Thank you
Carlettus