Re: [RFC][PATCH] (#7U4) file system auditing by location and name

On Saturday 07 May 2005 14:08, Steve Grubb wrote: OK, I decided to defer allocating the cache until its needed. (I make no warranties about races allocating the cache.) The attached patch is what I'm testing. Here's how it looks: [root@endeavor ~]# auditctl -w /etc/passwd -k fk_passwd -p rwea No rules [root@endeavor ~]# auditctl -l No rules AUDIT_WATCH_LIST: dev=3:2, path=/etc/passwd, filterkey=fk_passwd, perms=15, valid=1 [root@endeavor ~]# auditctl -W /etc/passwd -k fk_passwd -p rwea No rules [root@endeavor ~]# auditctl -l No rules No watches Everything looks fine so far. I need to fix auditctl so that it lists watches that get entered and then I can release the new audit package. -Steve