operation="link" [...] requested_mask="x" denied_mask="x" [...] is indeed unexpected - I've never seen an exec event for "link" before.
For the records: this also causes an exception in master, but with a slightly more useful error message (including the log line that causes the exception).
John, does this qualify as a kernel bug, or should I adjust the tools to accept this as a valid exec event?
operation="link" [...] requested_mask="x" denied_mask="x" [...] is indeed unexpected - I've never seen an exec event for "link" before.
For the records: this also causes an exception in master, but with a slightly more useful error message (including the log line that causes the exception).
John, does this qualify as a kernel bug, or should I adjust the tools to accept this as a valid exec event?