[PATCH] Rework of IPC auditing

Steve Grubb sgrubb at redhat.com
Fri Mar 31 19:24:44 UTC 2006


On Friday 10 March 2006 14:25, Dustin Kirkland wrote:
> 2) Support for an AUDIT_IPC_NEW_PERM audit message type.  This allows
> for separate auxiliary audit records for normal operations on an IPC
> object and permissions changes.  Note that the same struct
> audit_aux_data_ipcctl is used and populated, however there are separate
> audit_log_format statements based on the type of the message.

Can we have another name for this record type? I don't want us to get in the 
habit of adding "new" to the record type name. Is there something that better 
describes its purpose?

-Steve




More information about the Linux-audit mailing list