Avatar of Carletto
Carletto
Flag for Italy

asked on 

info on audit.rules

Hi,
I'm comparing these two lines in the audit.rules files.

-a always,exit -F arch=b32 -S clock_settime -F a0=0 -k time-change

Open in new window

-a always,exit -F arch=b32 -S clock_settime -k time-change

Open in new window


Could you please tell me the what -F a0=0 stands for?
Thank you
Carlettus
Linux SecurityLinux Networking

Avatar of undefined
Last Comment
Carletto

8/22/2022 - Mon