[patch] fix syscall speedup patch mips typo
Steve Grubb
sgrubb at redhat.com
Wed Mar 15 20:27:41 UTC 2006
On Wednesday 15 March 2006 15:24, Stephen Smalley wrote:
> So perhaps that information should be added to the avc messages?
But then when people are using the audit system and have rules, we have
duplicated information. The way it is, we only have 2 pieces of duplicated
information, comm & subj. But we have that duplication under normal
circumstances, too.
>we would still have the full syscall audit records emitted since they would
>have audit rules?
That is true.
-Steve
More information about the Linux-audit
mailing list