[RFC][PATCH] (#5, U2) (resent) filesystem auditing support

David Woodhouse dwmw2 at infradead.org
Tue Mar 8 15:27:02 UTC 2005


On Tue, 2005-03-08 at 09:07 -0600, Timothy R. Chavez wrote:
> > Putting this in the middle of the structure breaks binary compatibility
> > with existing audit userspace. I'll shift it to the end.
> >
> Ah yes, good point.  Thanks

I have done so in the 2.6.9-5.0.3.EL.audit.10 package which is now in
the yum repository. That package also contains the '#5 U2' version of
your file system auditing code. Unfortunately it lacks the third attempt
at catching rdev,uid,gid correctly in audit_inode() -- I'm building an
audit.11 kernel now with that in, but I wanted to put the audit.10
kernel out there as soon as possible because the binary incompatibility
is holding Steve up with newer auditd code.

-- 
dwmw2




More information about the Linux-audit mailing list