Re: [PATCH] Rework of IPC auditing
On 3/31/06, Steve Grubb <sgrubb(a)redhat.com> wrote:
On Friday 10 March 2006 14:25, Dustin Kirkland wrote:
> 2) Support for an AUDIT_IPC_NEW_PERM audit message type. This allows
> for separate auxiliary audit records for normal operations on an IPC
> object and permissions changes. Note that the same struct
> audit_aux_data_ipcctl is used and populated, however there are separate
> audit_log_format statements based on the type of the message.
Can we have another name for this record type? I don't want us to get in the
habit of adding "new" to the record type name. Is there something that better
describes its purpose?
I know we discussed on IRC, but for everyone's benefit, we're going to
call this record type AUDIT_IPC_SET_PERM and the function
audit_ipc_set_perm(), as it's called in each of the IPC_SET operations
on the ipc objects.
:-Dustin