What am I doing wrong ?
Code:
# auditctl -a exit,always -S open -F inode=`ls -i /etc/audit/auditd.conf | gawk '{print $1}'`
WARNING - 32/64 bit syscall mismatch, you should specify an arch
Error sending add rule data request (Rule exists)
Code:
# auditctl -a exit,always -F arch=64 -S open -F inode=`ls -i /etc/audit/auditd.conf | gawk '{print $1}'`
arch elf mapping not found
