[RFC][PATCH 0/2] (#6 U2) filesystem auditing
David Woodhouse
dwmw2 at infradead.org
Tue Mar 29 16:50:24 UTC 2005
On Tue, 2005-03-29 at 11:19 -0500, Stephen Smalley wrote:=
> > I'm also going to break up the patches into:
> >
> > Audit Subsystem Patch
> > Hook patch
>
> I'm not sure I see the point. In order to understand the hooks, you
> have to see how they are used, and unlike (say) LSM, there is only a
> single user of the hooks.
Presumably that point is that the hooks are what's of most interest to
Linux developers in general; the actual audit code can be treated as a
black box so can reasonably be posted separately.
--
dwmw2
More information about the Linux-audit
mailing list