audit-ptrace patch (untested)

Alexander Viro aviro at redhat.com
Tue Mar 13 19:39:09 UTC 2007


On Tue, Mar 13, 2007 at 03:00:46PM -0400, Amy Griffis wrote:
> > +	if (sid)
> > +		selinux_sid_to_string(sid, &context->obj_ctx, &len);
> > +}
> 
> Why did you choose to do the sid to string conversion at collection
> time, rather than waiting for audit_log_exit?

Narrower window for sid_to_context to change...




More information about the Linux-audit mailing list