Re: audit.63 kernel.
On Monday 20 June 2005 10:19, David Woodhouse wrote:
We capture the flags which may include LOOKUP_PARENT and hence
indicate
the the inode being reported is actually the _parent_ of the requested
path.
What is the flags? Where do I find info about it? Parsers need to know.
-Steve