[RFC][PATCH] (#7U4) file system auditing by location and name

[Steve Grubb]

On Saturday 07 May 2005 13:09, David Woodhouse wrote:
> Also, we seem to be missing the first few lines. Was this a BUG()?

It was:

May  7 11:58:45 localhost kernel: Unable to handle kernel NULL pointer 
dereference at virtual address 00000000
May  7 11:58:45 localhost kernel:  printing eip:
May  7 11:58:45 localhost kernel: c014bb37
May  7 11:58:45 localhost kernel: *pde = 00000000
May  7 11:58:45 localhost kernel: Oops: 0000 [#1]

My current theory is that audit_watch_cache is NULL. I'm currently building a 
new kernel to check it out. I'm attaching my current patch against the file 
system audit code that fixes numerous little issues. It is not final...its 
just so that no one duplicates the effort while debugging. Try as much or as 
little of it as you want.

-Steve
-------------- next part --------------
A non-text attachment was scrubbed...
Name: linux-2.6.9-fs-trans.patch
Type: text/x-diff
Size: 4013 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20050507/7572149a/attachment.bin>