On Wednesday 11 May 2005 14:29, Timothy R. Chavez wrote:
 Patch appears at bottom of message. 
In audit_remove_watch, could we do this:
+       ret = -ENOENT;
It makes more sense in the auditctl messages when deleting a watch that 
doesn't exist. We currently get permission denied which is not the case.
-Steve