PROBLEM: (QAR 45629) (Patch ID: OSF415-400359) ******** This patch fixes a problem that affects systems running the audit subsystem. When reading directives from a file, the auditmask utility does not correctly handle lines formatted as follows: event fail To reproduce this problem, do the following: WARNING: This particular test for the bug will change the audit mask on your system. Be prepared to restore it to the previous state. 1. Become root and create an audit event file, for example, /etc/sec/my_audit_events, containing the following events: open fail fstat succeed fail fchmod nosucceed fail close succeed unlink 2. Clear the auditmask: /usr/sbin/auditmask -n 3. Load the new event file: /usr/sbin/auditmask < /etc/sec/my_audit_events 4. List the event: /usr/sbin/auditmask A bug is indicated by the absence of the "open fail" event.