Adding a key to syscall rules

Steve Grubb sgrubb at redhat.com
Mon May 2 17:37:46 UTC 2005


On Monday 02 May 2005 12:06, Timothy R. Chavez wrote:
> I like this idea, it certainly doesn't hurt to have.

Its basically adding something thats in filesystem auditing to syscall to get 
symmetry back. Its out of balance now.

> What's your time frame for introducing new functionality to auditctl?

Probably later this week. I'm planning to release 0.7.3 today or tomorrow 
morning with your filesystem list patch + a few more things implemented in 
ausearch.

-Steve




More information about the Linux-audit mailing list