Re: [RFC][PATCH] (#7U2) [linux-2.6.12-rc2-mm1] file system auditing
On Saturday 23 April 2005 01:09, Timothy R. Chavez wrote:
diff -Nurp linux-2.6.12-rc2-mm1~orig/kernel/audit.c
linux-2.6.12-rc2-mm1~audit/kernel/audit.c ---
linux-2.6.12-rc2-mm1~orig/kernel/audit.c 2005-04-11 14:15:36.000000000
+0000 +++ linux-2.6.12-rc2-mm1~audit/kernel/audit.c 2005-04-21
20:58:37.000000000 +0000 @@ -322,6 +322,8 @@ static int
audit_netlink_ok(kernel_cap_t
case AUDIT_SET:
case AUDIT_ADD:
case AUDIT_DEL:
+ case AUDIT_WATCH_INS:
+ case AUDIT_WATCH_REM:
if (!cap_raised(eff_cap, CAP_AUDIT_CONTROL))
err = -EPERM;
break;
Don't you really want to add AUDIT_WATCH_LIST to this?
-Steve