[RFC][PATCH 0/2] (#6 U2) filesystem auditing

David Woodhouse dwmw2 at infradead.org
Tue Mar 29 16:50:24 UTC 2005


On Tue, 2005-03-29 at 11:19 -0500, Stephen Smalley wrote:=
> > I'm also going to break up the patches into:
> > 
> > Audit Subsystem Patch
> > Hook patch
> 
> I'm not sure I see the point.  In order to understand the hooks, you
> have to see how they are used, and unlike (say) LSM, there is only a
> single user of the hooks.

Presumably that point is that the hooks are what's of most interest to
Linux developers in general; the actual audit code can be treated as a
black box so can reasonably be posted separately.

-- 
dwmw2




More information about the Linux-audit mailing list