[patch] Syscall auditing - move "name=" field to the end

Chris Wright chrisw at osdl.org
Thu Mar 17 18:39:26 UTC 2005


* Timothy R. Chavez (tinytim at us.ibm.com) wrote:
> Let's rewrite Linux.  J/K.  But all jokes aside, can't we just log out the 
> length of the name= field with the rest of the record, ie: name_len=7 
> name=linux\n\0?

That's what BSM does.  But then, they do complete binary format.

-chris
-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net




More information about the Linux-audit mailing list