exclude's effect with multiple rules

Hey all,

So if I have the following two rules, what should be expected behaviour?

auditctl -a entry,always -S chmod
auditctl -a exclude,always -S all

... Assume we can change the ordering.

Thanks,
Mike

The expected behavior is that rule 1 is accepted and rule 2 produces an error and is rejected.

-Steve