[patch] Syscall auditing - move "name=" field to the end

[Valdis.Kletnieks at vt.edu]

On Thu, 17 Mar 2005 19:07:19 GMT, David Woodhouse said:

> When we're speaking of making the kernel render it that way, I disagree.
> We really don't want to get into that kind of text processing. In the
> common case where it's safe, let's dump it as text. In the rare case
> that it contains dubious characters, dump it as hex. 

If you include "whitespace" as a "dubious" character, that would kill
several birds with one stone.  Then you just need 'name=A:ascii_string'
or 'name=H:hexstring' and most parsing issues go away.  Works for me...
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20050317/73511df6/attachment.sig>