[PATCH] (1/2) new audit filter allows excluding messages by type (kernel)

Linda Knippers linda.knippers at hp.com
Wed Nov 9 15:43:11 UTC 2005


Steve Grubb wrote:
> On Wednesday 09 November 2005 08:46, Amy Griffis wrote:
> 
>>AUDIT_FILTER_USER is not syscall related and should not have been
>>implemented as such.  Stuffing it in the syscall filtering code was
>>lazy.
> 
> 
> I'm thinking that you are completely misunderstanding all of this.

Maybe you could explain?

-- ljk




More information about the Linux-audit mailing list