Description of problem: augrep -s <iso timestamp> works correctly unless there are old records left from a previous year and then it displays them. Version-Release number of selected component (if applicable): 2.4.21-15.0.3.EL How reproducible: Everytime. Steps to Reproduce: 1. Somehow generate audit records from a previous year. (May want to make the month later than the current month. 2. Do a augrep -s <date in iso format> with this years date. 3. Actual results: Gives results from previous years. Expected results: Should only have results from the date given and later Additional info:
This bug is now fixed in laus-0.1-67RHEL3, which should be in RHEL-3-U5, and which meanwhile can be downloaded from: http://people.redhat.com/~jvdias/laus/
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on the solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2005-219.html