[RFC][PATCH] (#2) Prelim in-kernel file system auditing support

Stephen Smalley sds at epoch.ncsc.mil
Thu Jan 27 19:04:07 UTC 2005


On Thu, 2005-01-27 at 14:04, Timothy R. Chavez wrote:
> Then again, now that I think about this a little more...  This won't
> work.  With only the inode, I'll have to automatically allocate space
> for i_audit regardless of whether or not its being watched. 

I wasn't suggesting allocating the data there.  I just saying that you
need to remove the #ifdef's from alloc_inode and destroy_inode and
replace them with unconditional calls to static inline functions, which
in turn can be defined away to nothing if the config option is disabled,
per Documentation/SubmittingPatches section 2.  No real change in the
code, just avoiding #ifdefs in fs/inode.c.

-- 
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency




More information about the Linux-audit mailing list