[PATCH] Audit filter rule operators (1/2)

Steve Grubb sgrubb at redhat.com
Mon Oct 24 12:46:33 UTC 2005


On Friday 21 October 2005 19:24, Dustin Kirkland wrote:
> This is the user space component of this patch.  

Thanks. I'll merge this when I open the 1.1 series. That should be later this 
week.

> I had to make this a bit smarter, and I think I did it cleanly using
> strstr().  Each of the six operators (!=, >=, <=, =, >, <) are searched

Because of shell redirection, I wonder if we need to make another form of 
these. Like ".ne.", ".ge.", ".le.", ".eq.", ".gt.", ".lt." respectively. 
(Remember FORTRAN?)

> My only concern is that *f and *v were const before, but now I'm
> modifying them, overwriting the operator bytes.  I suppose I could
> strdup() this and work on that.  Let me know if that's preferred.

Don't worry, I'll rearrange everything.

Thanks,
-Steve




More information about the Linux-audit mailing list