auditctl bug: load rules from file

[Steve Grubb]

On Tuesday 26 July 2005 17:33, Amy Griffis wrote:
> Shouldn't this be checked in kernel?

That was my preference. I don't think they wanted to do it, though. The 
problem truly is a kernel problem as auditctl may not be the only utility in 
the future.

> Versus userspace having to get the list of rules from the kernel and walk
> through it? 
>
> Which way were you thinking?

Get the list and walk it.

-Steve