watch structure

Casey Schaufler casey at schaufler-ca.com
Tue Apr 5 14:00:19 UTC 2005


--- Stephen Smalley <sds at tycho.nsa.gov> wrote:

> The structure could just define the length and perms
> fields, then put a
> char buf[0]; at the end to allow referencing of
> watch->buf, and just
> include the two strings immediately after the
> structure when creating
> it.  Kernel can then extract them appropriately
> based on the lengths.
> No need to reserve fixed size fields for them.

That would require two copyins, one to get the
lengths and another to get the "buf". Not that
that's necessarily a stopper, but I had assumed
the goal was a one-shot interface.


Casey Schaufler
casey at schaufler-ca.com

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 




More information about the Linux-audit mailing list