[PATCH] Auditd shutdown credentials

[Steve Grubb]

On Wednesday 27 April 2005 16:36, Steve Grubb wrote:
> > > +     if (unlikely(audit_pid && t->pid == audit_pid)) {
> > > +             if (sig == SIGTERM || sig == SIGKILL) {
>
> > Any reason this should be unavailable when syscall auditing is off?

I'm pretty sure I mis-read your question. Can you elaborate?

-Steve