Re: [RFC][PATCH 0/2] (#6 U2) filesystem auditing
On Tue, 2005-03-29 at 17:50 +0100, David Woodhouse wrote:
Presumably that point is that the hooks are what's of most
interest to
Linux developers in general; the actual audit code can be treated as a
black box so can reasonably be posted separately.
At least with LSM we received complaints that the real long term
maintenance impact of the hooks couldn't be properly interpreted without
seeing hook function implementations too, e.g. to see what
assumptions/dependencies they had.
--
Stephen Smalley <sds(a)tycho.nsa.gov>
National Security Agency