LSM stacking v30 Audit changes

Paul Moore paul at paul-moore.com
Mon Nov 29 19:54:31 UTC 2021


On Mon, Nov 29, 2021 at 2:27 PM Casey Schaufler <casey at schaufler-ca.com> wrote:
>
> It would be really, really helpful if I could be feedback
> on the v30 LSM stacking patches approach to gathering
> supplemental audit records. I used a list scheme so as
> to support other uses, such as container ID records. It's
> what I would want. It's an easy change if it isn't what
> y'all want. I'm eager to get this resolved.

FWIW, I had the last revision on the todo pile for review but there
was an unexpected number of issues that popped up and I never made it
through them before you posted v30.  I've added the latest revision to
my todo list and hopefully I can get to them before the end of the
week.

-- 
paul moore
www.paul-moore.com




More information about the Linux-audit mailing list