Order of action and filter

[wland32]

trafficstars

https://github.com/Neo23x0/auditd/blob/da8d66d5565e4a4634db8387891ebc1f61e4b9d2/audit.rules#L117

Why it the order of action and filter in this line "-a exit,always" and not "-a always,exit" like all the other lines have?

This line https://github.com/Neo23x0/auditd/blob/master/audit.rules#L90 also seems to have a reverse order.

Is this intentional?

[Neo23x0]

Oh my .. no. Somehow I've missed this issue in 2019. I'll fix that.

[kovacs-andras]

It really doesn't matter because augenrules will make an -a always,exit from it anyways. But I also prefer the same way as augenrules makes it because it's easier to read.