[PATCH] Rework of IPC auditing

Dustin Kirkland dustin.kirkland at gmail.com
Fri Mar 31 21:13:44 UTC 2006


On 3/31/06, Steve Grubb <sgrubb at redhat.com> wrote:
> On Friday 10 March 2006 14:25, Dustin Kirkland wrote:
> > 2) Support for an AUDIT_IPC_NEW_PERM audit message type. This allows
> > for separate auxiliary audit records for normal operations on an IPC
> > object and permissions changes. Note that the same struct
> > audit_aux_data_ipcctl is used and populated, however there are separate
> > audit_log_format statements based on the type of the message.
>
> Can we have another name for this record type? I don't want us to get in the
> habit of adding "new" to the record type name. Is there something that better
> describes its purpose?

I know we discussed on IRC, but for everyone's benefit, we're going to
call this record type AUDIT_IPC_SET_PERM and the function
audit_ipc_set_perm(), as it's called in each of the IPC_SET operations
on the ipc objects.


:-Dustin




More information about the Linux-audit mailing list