Re: [PATCH] auditfs updates to .46
On Thu, 2005-05-26 at 09:20 -0400, Steve Grubb wrote:
We are talking about the case where an audit event would be generated
but
can't because there's no context? If so, we have to record the event somehow.
We're talking about the case where a watched file has been touched, but
the sysadmin has explicitly told the kernel that this task is _not_ to
be audited.
--
dwmw2