Re: [PATCH] (1/2) new audit filter allows excluding messages by type (kernel)
On Wednesday 09 November 2005 08:46, Amy Griffis wrote:
AUDIT_FILTER_USER is not syscall related and should not have been
implemented as such. Stuffing it in the syscall filtering code was
lazy.
I'm thinking that you are completely misunderstanding all of this.
-Steve