Hello,
On Friday, November 1, 2024 8:39:31 AM EDT Laurent Bigonville via Linux-audit
wrote:
I see that the python bindings have changed their API and I was
wondering if there was any documentation about it?
There was this announcement:
https://lore.kernel.org/linux-audit/4855993.31r3eYUQgx@x2/T/#u
A little over a year ago I had to make some decisions about the project. I
was being transferred to a new department and audit is no longer my day job.
I had been asking for helpers to take over but none seemed ready or
available. So I needed to de-risk, downsize, and jettison parts of the code
since the project will essentially be a hobby. (As a hobby it competes with
mowing the grass and leisure activities.)
I've the following piece of code for exemple, that is now not
working
because the audit_set_enabled() function is not present anymore.
> python -c import audit; fd =
> audit.audit_open();audit.audit_set_enabled(fd, 1); audit.audit_close(fd)
The python code for libaudit was trimmed to just logging events. It had a
problematic incompatibility with swig and c99 flexible arrays. To avoid future
swig incompatibilities given there were no apparent maintainers coming along
it was chopped to the minimum. I didn't think people would be writing the
equivalent of auditctl in python.
This one function could be added back easily. It would be 2 lines of code.
But I'd be reluctant to add anything else.
-Steve