Re: [PATCH] Auditd shutdown credentials
On Wednesday 27 April 2005 16:36, Steve Grubb wrote:
> > + if (unlikely(audit_pid && t->pid ==
audit_pid)) {
> > + if (sig == SIGTERM || sig == SIGKILL) {
> Any reason this should be unavailable when syscall auditing is off?
I'm pretty sure I mis-read your question. Can you elaborate?
-Steve