Comment # 3 on bug 1226418 from Henryk Hecht
If the code is that old, it dates from audit-1.x, which is before augenrules
and the inclusion of 10-no-audit.rules -> audit.rules as the baseline
configuration.  So its behavior makes sense with contemporary versions of
audit.

I am unsurprised that the module is unpopular: there are probably very few
people actively and directly using audit in the first place, and the yast
module isn't required/recommended by anything, so it's hard to know that it's
there.  But the rule editing probably hasn't worked properly since at least
2015, so if this is the first bug report of that, it seems really no one at all
is using it, and dropping it may be reasonable.

If not, the other three tabs still seem to work, so maybe it could be salvaged
by either making it edit /etc/audit/rules.d/audit.rules instead of
/etc/audit/audit.rules, or else just scrapping the rules editing portion.


You are receiving this mail because: