[patch] Syscall auditing - move "name=" field to the end
Chris Wright
chrisw at osdl.org
Thu Mar 17 18:39:26 UTC 2005
* Timothy R. Chavez (tinytim at us.ibm.com) wrote:
> Let's rewrite Linux. J/K. But all jokes aside, can't we just log out the
> length of the name= field with the rest of the record, ie: name_len=7
> name=linux\n\0?
That's what BSM does. But then, they do complete binary format.
-chris
--
Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net
More information about the Linux-audit
mailing list