audit.63 kernel.

Steve Grubb sgrubb at redhat.com
Mon Jun 20 20:53:14 UTC 2005


On Monday 20 June 2005 10:19, David Woodhouse wrote:
> We capture the flags which may include LOOKUP_PARENT and hence indicate
> the the inode being reported is actually the _parent_ of the requested
> path.

What is the flags? Where do I find info about it? Parsers need to know.

-Steve




More information about the Linux-audit mailing list