[RFC] Do away with entry filter

Linda Knippers linda.knippers at hp.com
Fri Feb 27 19:27:26 UTC 2009


Steve Grubb wrote:
> On Friday 27 February 2009 12:48:30 pm Linda Knippers wrote:
>> I'm suggesting changing the name to something that makes a little
>> more sense, or doing away with it if it isn't necessary for syscalls
>> anymore.  I'm assuming that's the case because there's no need to
>> distinguish it from "entry", so could we just drop "exit" and
>> ignore it (silently or otherwise) in the transition?
> 
> We still have user, task, and exclude filters. So we still need to be able to 
> specify them.

Sure, I'm only talking about the options that apply to syscalls.
If we don't need "entry" because we're going to make everything
work like "exit", then it seems like we don't need "exit" either.

-- ljk
> 
> -Steve




More information about the Linux-audit mailing list