[RFC][PATCH] (#5, U2) (resent) filesystem auditing support
David Woodhouse
dwmw2 at infradead.org
Tue Mar 8 15:27:02 UTC 2005
On Tue, 2005-03-08 at 09:07 -0600, Timothy R. Chavez wrote:
> > Putting this in the middle of the structure breaks binary compatibility
> > with existing audit userspace. I'll shift it to the end.
> >
> Ah yes, good point. Thanks
I have done so in the 2.6.9-5.0.3.EL.audit.10 package which is now in
the yum repository. That package also contains the '#5 U2' version of
your file system auditing code. Unfortunately it lacks the third attempt
at catching rdev,uid,gid correctly in audit_inode() -- I'm building an
audit.11 kernel now with that in, but I wanted to put the audit.10
kernel out there as soon as possible because the binary incompatibility
is holding Steve up with newer auditd code.
--
dwmw2
More information about the Linux-audit
mailing list