Audit Parsing Library Requirements

John D. Ramsdell ramsdell at mitre.org
Fri Mar 10 17:50:06 UTC 2006


Looks good to me.  I only have simple editorial comments.

Steve Grubb <sgrubb at redhat.com> writes:

> success and 0 on failure unless otherwise noted. Where the return
> type is a char, NULL will indicate failure.

type is a char pointer, NULL ...

> the fields through functions that either return string pointer or
> ints.

the fields through functions that either return a pointer to an
immutable, zero-terminated array of ASCII characters or integral
values.

John




More information about the Linux-audit mailing list