[patch] fix syscall speedup patch mips typo

Steve Grubb sgrubb at redhat.com
Wed Mar 15 20:27:41 UTC 2006


On Wednesday 15 March 2006 15:24, Stephen Smalley wrote:
> So perhaps that information should be added to the avc messages?

But then when people are using the audit system and have rules, we have 
duplicated information. The way it is, we only have 2 pieces of duplicated 
information, comm & subj. But we have that duplication under normal 
circumstances, too.

>we would still have the full syscall audit records emitted since they would
>have audit rules? 

That is true.

-Steve




More information about the Linux-audit mailing list