Re: [patch] fix syscall speedup patch mips typo
On Wednesday 15 March 2006 15:24, Stephen Smalley wrote:
So perhaps that information should be added to the avc messages?
But then when people are using the audit system and have rules, we have
duplicated information. The way it is, we only have 2 pieces of duplicated
information, comm & subj. But we have that duplication under normal
circumstances, too.
we would still have the full syscall audit records emitted since they
would
have audit rules?
That is true.
-Steve