[redhat-lspp] security context in audit records (audit.39 kernel)

[Daniel H. Jones]

Stephen Smalley wrote:
> On Thu, 2005-05-19 at 14:58 -0500, Daniel H. Jones wrote:
> 
>>Thanks for all your comments ... New patch still applies to kernel.39
> 
> 
> As a side issue, given that this patch is specifically for enhanced
> auditing for LSPP, should it eventually go to the linux-audit mailing
> list for wider discussion and ultimate inclusion in Dave Woodhouse's
> audit tree and hopefully on to Andrew Morton?  Or is linux-audit and
> Dave Woodhouse's tree only intended for the CAPP work?
> 
The intent is to submit it to linux-audit eventually for wider review 
and go upstream. But I think the time to do that is after the CAPP work 
has stabilized. Given that David Woodhouse puts out a few audit kernels 
a day, I don't think that point has been reached.



-- 
Thanks,
Dan Jones
IBM Linux Technology Center, Security
512-838-1794 (T/L 678-1794)
hotrats at us.ibm.com