[RFC][PATCH 3/3] (#7U1) file system auditing

[Stephen Smalley]

On Thu, 2005-04-21 at 22:59 +0000, Timothy R. Chavez wrote: 
> Hello,
> 
> This is the updated user space patch against audit-0.6.10.  There should be a 
> patch out for audit-0.6.12 by tommorrow.

You changed a #include <linux/audit.h> to #include
</usr/include/linux/audit.h> in lib/libaudit.h, which breaks building
unless your /usr/include/linux happens to refer to the patched kernel
tree, right?  Not to mention being a bad idea anyway.  If I revert that
particular change and do the usual manual creation of linux/audit.h as a
symlink to the patched kernel's include/linux/audit.h, then it seems to
build ok for me.

Is the userspace interface "stable" now (i.e. will you at least preserve
backward compatibility for any future changes), so we can stop
rebuilding auditctl and auditd for each new kernel patch?

-- 
Stephen Smalley <sds at tycho.nsa.gov>
National Security Agency