[patch] fix syscall speedup patch mips typo
Jason Baron
jbaron at redhat.com
Wed Mar 15 20:58:49 UTC 2006
On Wed, 15 Mar 2006, Steve Grubb wrote:
> On Wednesday 15 March 2006 15:33, Amy Griffis wrote:
> > Why can't a user just disable syscall auditing if they aren't
> > interested in adding rules?
>
> because then the avc messages go to syslog.
>
hmmm, couldn't auditd keep track of the number of rules and enable or
disable syscall auditing as appropriate?
-Jason
More information about the Linux-audit
mailing list