[PATCH] get dev value for inode audit records
Darrel Goeddel
dgoeddel at trustedcs.com
Thu Feb 24 19:39:43 UTC 2005
Chris Wright wrote:
> That's what I was thinking, Erich said he'd give the patch a test. I
> kept rdev and added dev. But, from the perspective of the converstaion
> we had in the other thread (re: supplemental groups), shouldn't the
> security attributes of the object be dumped as well? Here's a patch to
> try Erich, but I think I'll spin up another one to dump uid/gid too.
>
> thanks,
> -chris
>
Don't forget the mode for completeness :) That should be similar to a portion
of the (rough idea) patch that I submitted to the list on Jan 21. I believe you
stated that this information would be redundant with Tim's audit additions
(although I could have misinterpreted that). Is that no longer the case? I
apologize for my ignorance here - I really do hope to be able to start playing
with Tim's patches soon (and David's prelim IPC audit patch).
Thanks,
Darrel
More information about the Linux-audit
mailing list