Comment 6 for bug 1158500

I built Saucy's audit package for Precise and ran it under the -lts-saucy kernel. When running the auditctl command in the bug description, it emitted the following warning:

  Warning - entry rules deprecated, changing to exit rule

Starting with kernel version 3.3, the audit kernel code refuses entry,always rules. Starting with audit version 2.0, auditctl converts entry,always rules to exit,always rules.

The fix seems to be to backport upstream audit commits 300, 301, and 307 to Precise's audit package to make auditctl convert entry,always rules to exit,always.