[RFC][PATCH] (#5, U3) filesystem auditing

[Timothy R. Chavez (GMail)]

Hello,

- This patch reorders the hooks to be consistently placed above the security 
hooks (Thanks Serge).  

- It also removes the audit_notify_watch() hooks from vfs_rmdir and vfs_unlink 
and places it in may_delete() (Thanks Stephen).

- Stripped out the auditfs_enable feature because there was no outstanding 
use-case for it.  We determined it was sufficient to have the compile time 
configure option only.  (Thanks David, Thanks Steve).

Sorry I didn't get this out sooner David.

Also, what I'm doing with reference counting and locking doesn't seem to be 
too clear (and it really isn't) -- I apologize for that.  Though this will 
all be described in detail in a document, I'll go ahead and send out an 
e-mail explaining what's going on.


-tim

-- 
-tim
-------------- next part --------------
A non-text attachment was scrubbed...
Name: linux-2.6.11-auditfs-tc1-5-3.patch
Type: text/x-diff
Size: 30833 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20050308/6bf6e8ed/attachment.bin>