LSM stacking v30 Audit changes

Casey Schaufler casey at schaufler-ca.com
Mon Nov 29 20:05:19 UTC 2021


On 11/29/2021 11:54 AM, Paul Moore wrote:
> On Mon, Nov 29, 2021 at 2:27 PM Casey Schaufler <casey at schaufler-ca.com> wrote:
>> It would be really, really helpful if I could be feedback
>> on the v30 LSM stacking patches approach to gathering
>> supplemental audit records. I used a list scheme so as
>> to support other uses, such as container ID records. It's
>> what I would want. It's an easy change if it isn't what
>> y'all want. I'm eager to get this resolved.
> FWIW, I had the last revision on the todo pile for review but there
> was an unexpected number of issues that popped up and I never made it
> through them before you posted v30.  I've added the latest revision to
> my todo list and hopefully I can get to them before the end of the
> week.

Thanks, it's much appreciated.




More information about the Linux-audit mailing list