[RFC][PATCH 0/3][REVISED] CAPP-compliant file system auditing

Stephen Smalley sds at tycho.nsa.gov
Fri Apr 1 16:51:54 UTC 2005


On Fri, 2005-04-01 at 10:47 -0600, Timothy R. Chavez wrote:
> Hm.  Ok...
> 
> So how about I do this all in one message, cut out the general overview and 
> hook explanations and save those for discussion?  By the time this goes to 
> fsdevel there should be an audit package in-sync with the RFC patch.

Possibly you can do it as two messages, i.e.
[1/2] includes the intro text, hook explanations, and hook patch (which
is the most important piece to get accepted by the kernel developers)
[2/2] includes design/implementation description of the auditfs.c code
and the patch for it (which is mostly just so that they can go look at
it when they aren't sure how you are using a given hook).

-- 
Stephen Smalley <sds at tycho.nsa.gov>
National Security Agency




More information about the Linux-audit mailing list