summary: Test for bz497542 (auditctl parsing error for arg0-3 fields) description: | Bug summary: auditctl parsing error for arg0-3 fields Bugzilla link: https://bugzilla.redhat.com/show_bug.cgi?id=497542 Description: Description of problem: Auditctl is not accepting rules of the following form: -a entry,always -S kill -F uid=0 -F a0!=-1 -F a1=1 Version-Release number of selected component (if applicable): audit-1.7.7-6 contact: omoris@redhat.com component: - audit test: ./runtest.sh recommend: - audit duration: 5m enabled: true tag: - TIPpass_Security - Tier3 - Tier3security - fedora-wanted tier: '3' link: - relates: https://bugzilla.redhat.com/show_bug.cgi?id=497542 extra-nitrate: TC#0075610 extra-summary: /CoreOS/audit/Regression/bz497542-auditctl-parsing-error-for-arg0-3-fields extra-task: /CoreOS/audit/Regression/bz497542-auditctl-parsing-error-for-arg0-3-fields