Adding a key to syscall rules
Steve Grubb
sgrubb at redhat.com
Mon May 2 17:37:46 UTC 2005
On Monday 02 May 2005 12:06, Timothy R. Chavez wrote:
> I like this idea, it certainly doesn't hurt to have.
Its basically adding something thats in filesystem auditing to syscall to get
symmetry back. Its out of balance now.
> What's your time frame for introducing new functionality to auditctl?
Probably later this week. I'm planning to release 0.7.3 today or tomorrow
morning with your filesystem list patch + a few more things implemented in
ausearch.
-Steve
More information about the Linux-audit
mailing list