On Mon, Dec 10, 2018 at 5:18 PM Richard Guy Briggs <rgb(a)redhat.com> wrote:
Give a clue as to the source of mark, watch and tree rule changes.
See:
https://github.com/linux-audit/audit-kernel/issues/50
See:
https://github.com/linux-audit/audit-kernel/issues/59
Signed-off-by: Richard Guy Briggs <rgb(a)redhat.com>
---
kernel/audit.h | 4 ++--
kernel/audit_fsnotify.c | 2 +-
kernel/audit_tree.c | 24 ++++++++++++------------
kernel/audit_watch.c | 6 ++++--
kernel/auditsc.c | 4 ++--
5 files changed, 21 insertions(+), 19 deletions(-)
In the previous revision of this patchset I mentioned not wanting to
change right now, I stand by that in this patchset.
--
paul moore
www.paul-moore.com