On Mon, 2005-05-09 at 09:35 -0500, Timothy R. Chavez wrote:
Admittedly, my approach was sloppier, and it appeared it wasn't
working
for you (but I'm trying to figure out why still... in theory, the init
function should have always been hit prior to being able to add any kind
of watch right).
There are _two_ instances of audit_init(). You only added
audit_filesystem_init() to one of them.
--- audit.c~ 2005-05-10 13:25:19.000000000 +0100
+++ audit.c 2005-05-10 13:34:06.000000000 +0100
@@ -542,6 +542,7 @@ int __init audit_init(void)
audit_initialized = 1;
audit_enabled = audit_default;
+ audit_filesystem_init();
audit_log(NULL, "initialized");
return 0;
}
--
dwmw2