[RFC][PATCH 2/2] (#6 U2) filesystem auditing
Timothy R. Chavez
tinytim at us.ibm.com
Tue Mar 29 01:55:02 UTC 2005
Hello,
Here is the patch that adds new functionality to the audit-0.6.9 as well as
changes some old. Patched against audit-0.6.9.
CHANGELOG
+ The major addition is the ability to "list" watches on a given directory.
-> Added AUDIT_WATCH_LST macro
+ Defined new -L option
-> Added a new "watch" field to the audit_reply struct
-> Added new function audit_list_watches() to libaudit
-> Added support for watch listing in auditctl
+ Gave ability for auditctl to receive AUDIT_WATCH_ERR messages
-> Made it so the kernel could send AUDIT_WATCH_ERR messages regarding
AUDIT_WATCH_INS/REM/LST in the same fashion.
+ Changed types in libaudit to be identical to the types of audit_watch in
audit.h
--
-tim
-------------- next part --------------
A non-text attachment was scrubbed...
Name: auditfs-audit-0.6.9.patch
Type: text/x-diff
Size: 7854 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20050328/888991f3/attachment.bin>
More information about the Linux-audit
mailing list