[PATCH] Re-implement auditd main loop using libev

Steve Grubb sgrubb at redhat.com
Fri Aug 8 03:03:51 UTC 2008


On Thursday 07 August 2008 22:02:53 DJ Delorie wrote:
> This is the first in a (hopefully short) series of patches to add the
> server side of the remote logging that was started in the 1.7 series.
> The idea here is to use the libev event library to manage events
> coming in to auditd, be they from netlink, signals, or some network
> connection (a future patch); rather than the custom event loop that
> only supported netlink.  This also simplifies signal handling, as
> signals are recognized synchronously in the main context instead of in
> a signal context.

Just an FYI for anyone making changes to the audit code that there are 2 test 
suites, one from IBM as part of the LTP and one from HP here:

http://sourceforge.net/projects/audit-test/

they should still pass at this point.

This patch was applied. Thanks! I needed to adjust the AM_FLAGS in libev for 
PIC. There have been a lot of updates to svn today...anyone sending patches 
might want to doublecheck that they are up to date.

Thanks,
-Steve




More information about the Linux-audit mailing list