On Wednesday, February 22, 2017 9:50:54 PM EST Richard Guy Briggs wrote:
Simplify and eliminate flipping in and out of message fields, relying
on
nfmark the way we do for audit_key.
https://github.com/linux-audit/audit-kernel/issues/11
Signed-off-by: Richard Guy Briggs <rgb(a)redhat.com>
If this is reworked, do you mind including a raw log event in the explanation
part of the patch? I need to see the resulting event to see how user space
needs to adapt.
Thanks,
-Steve