Re: watch dir problem
On Thursday 26 May 2005 15:03, Steve Grubb wrote:
On Thursday 26 May 2005 15:46, Timothy R. Chavez wrote:
> Is the inode being reported the inode of audit/ or audit.log?
logs have long since been rotated. I'll try to recreate in better way.
Also, I've been torturing my machine with rule & watch insertion for over an
hour. It seems to be doing fine. Maybe the undersized allocation was causing
all my problems.
Are you using a .49 or .50 kernel? I wasn't quite sure if David said "OK"
to just
using the hash table from now on or to use the i_audit field until we're in the
clear.
David has incorporated most of the cleanups I had and then he made some
more which I've also added to my tree.. and the last major thing I can think of
is to correctly handle audit_notify_watch() in fs/namei.c
-tim
-Steve
--
Linux-audit mailing list
Linux-audit(a)redhat.com
http://www.redhat.com/mailman/listinfo/linux-audit