Re: [RFC][PATCH 0/3][REVISED] CAPP-compliant file system auditing
On Fri, 2005-04-01 at 10:47 -0600, Timothy R. Chavez wrote:
Hm. Ok...
So how about I do this all in one message, cut out the general overview and
hook explanations and save those for discussion? By the time this goes to
fsdevel there should be an audit package in-sync with the RFC patch.
Possibly you can do it as two messages, i.e.
[1/2] includes the intro text, hook explanations, and hook patch (which
is the most important piece to get accepted by the kernel developers)
[2/2] includes design/implementation description of the auditfs.c code
and the patch for it (which is mostly just so that they can go look at
it when they aren't sure how you are using a given hook).
--
Stephen Smalley <sds(a)tycho.nsa.gov>
National Security Agency