audit.50 kernel

Timothy R. Chavez tinytim at us.ibm.com
Thu May 26 16:11:30 UTC 2005


On Thursday 26 May 2005 10:56, David Woodhouse wrote:
> On Thu, 2005-05-26 at 10:50 -0500, Timothy R. Chavez wrote:
> > Well... you're building RPMs with the hash table stuff... so did you want to branch?
> > Because I need to be able to test and fix bugs so that I can submit to LKML.  Maybe
> > I'm not following ya.  You want one implementation (the hash table) for Redhat-only
> > kernels and a separate (i_audit) implementation for mainline?
> 
> Well the theory was the hash table stuff wouldn't really affect the
> testing much. So having it as an addon only in the RPM would be at least
> feasible. 
> 
> In fact I think it might be useful to use the hash table in the mainline
> version too, and allocate each inode's audit data only on demand --
> we're currently allocating it for _every_ inode at the moment when in
> fact it's rarely going to be used. But I was going to make that
> suggestion in 'diff -up' form instead of just waffling about it ;)

I'm fine with the hash table piece.  It will require more testing, yes.  However,
I'd just like to get the i_audit implementation to a state where Steve can run
it and not crash ;-)... ya know, make sure I address those bugs first and
not allow them to burrow deeper.

-tim




More information about the Linux-audit mailing list