Re: [PATCH] enable /proc/$$/loginuid

Also, We may or someone else may want to provide advanced filtering (anything more advanced then what is already provided) of audit records before they reach an audit log. Better to do this filtering in userspace via a daemon then in the kernel. We should keep the in-kernel audit subsystem as small and efficient as possible. Anything that can be delegated to userspace should be delegated to userspace. -- Timothy R. Chavez