Linux Auditing patch and additional questions

[Mauricio Lin]

Hi all,

I am looking for the patch done by Rik Faith according to the webpage
http://lwn.net/Articles/73623/. The link
http://people.redhat.com/faith/audit/audit-20040226.1411.patch looks not
available anymore.

I would like to check the patch to see clearly the code included in the
kernel and what exactly were changed.

BTW, what is the main difference between the auditing syscall and the strace
tool?

Does auditing syscall provide more accurate values?

Futhermore does auditing tool provide the time or elapsed time that a system
call was allocated for each processor in a SMP platform? Does it trace the
system call by processor?

BR,

Mauricio Lin.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20060224/7f5e1d90/attachment.htm>