Re: [RFC PATCH ghak10 2/3] audit: Add the audit_adjtime() function

I think we want the modes field so that we know what was changed. But do we really need to know maxerror or status? I think we should limit this to the modes and any value of a time adjustment. > Note that this new auxiliary record gets only logged on *modifying* > operations, which should not be that frequent, and thus it shouldn't > be a problem to output a bit of potentially useful information. We're after just security information.