[patch] Syscall auditing - move "name=" field to the end

David Woodhouse dwmw2 at infradead.org
Thu Mar 17 19:07:19 UTC 2005


On Thu, 2005-03-17 at 10:56 -0800, Casey Schaufler wrote:
> Another alternative is the old "\ddd" notation.
> It's not nice, but it is much better than dumping
> path names in hex.

When we're speaking of making the kernel render it that way, I disagree.
We really don't want to get into that kind of text processing. In the
common case where it's safe, let's dump it as text. In the rare case
that it contains dubious characters, dump it as hex. 

-- 
dwmw2




More information about the Linux-audit mailing list