[RFC][PATCH 2/2] (#6 U2) filesystem auditing

Timothy R. Chavez tinytim at us.ibm.com
Tue Mar 29 01:55:02 UTC 2005


Hello,

Here is the patch that adds new functionality to the audit-0.6.9 as well as 
changes some old.  Patched  against audit-0.6.9. 

CHANGELOG

+ The major addition is the ability to "list" watches on a given directory.
   -> Added AUDIT_WATCH_LST macro
+ Defined new -L option
   -> Added a new "watch" field to the audit_reply struct
   -> Added new function audit_list_watches() to libaudit
   -> Added support for watch listing in auditctl
+ Gave ability for auditctl to receive AUDIT_WATCH_ERR messages
   -> Made it so the kernel could send AUDIT_WATCH_ERR messages regarding 
AUDIT_WATCH_INS/REM/LST in the same fashion.
+ Changed types in libaudit to be identical to the types of audit_watch in 
audit.h




-- 
-tim
-------------- next part --------------
A non-text attachment was scrubbed...
Name: auditfs-audit-0.6.9.patch
Type: text/x-diff
Size: 7854 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20050328/888991f3/attachment.bin>


More information about the Linux-audit mailing list