Re: auditctl bug: load rules from file
Steve Grubb wrote: [Tue Jul 26 2005, 05:27:58PM EDT]
On Tuesday 26 July 2005 17:23, Timothy R. Chavez wrote:
> This isn't a userspace issue, but do you think this should be permitted?
> ?I'd expect a "Rule already exists" type error *shrug*
This is already on the TODO list. I'll try to fix this in the next round of
development.
Shouldn't this be checked in kernel? Versus userspace having to get
the list of rules from the kernel and walk through it?
Which way were you thinking?
Amy