Proposal for new Linux auditdline_test

[ebouillard]

Abstract
The auditdline_test is used to check the living rules of the auditd service.

Link to Proposal
#115

[vojtapolasek]

Hello,
thank you for this contribution. It looks very interesting. I looked at the auditd_line test. Have you considered using more filters than just "key" for the auditd_line_object? It would be nice to be able to select a line through regexp match against the whole rule line and then check some parameters within the state, e.g. line number.
To add some context; it would be great to be able to if certain rules are in certain order, e.g. more specific rules are preceding more general rules.