Re: [RFC][PATCH 2/3] (#7U1) file system auditing (the correct patch)

On Fri, 2005-04-22 at 06:49 +0000, Timothy R. Chavez wrote: > --- linux-2.6.9~orig/security/selinux/nlmsgtab.c 2004-10-18 > 21:54:55.000000000 +0000 +++ > linux-2.6.9~audit/security/selinux/nlmsgtab.c 2005-04-13 > 18:46:31.000000000 +0000 @@ -95,6 +95,9 @@ static struct nlmsg_perm > nlmsg_audit_per > { AUDIT_DEL, NETLINK_AUDIT_SOCKET__NLMSG_WRITE }, > { AUDIT_USER, NETLINK_AUDIT_SOCKET__NLMSG_WRITE }, > { AUDIT_LOGIN, NETLINK_AUDIT_SOCKET__NLMSG_WRITE }, > + { AUDIT_WATCH_INS, NETLINK_AUDIT_SOCKET__NLMSG_WRITE }, > + { AUDIT_WATCH_REM, NETLINK_AUDIT_SOCKET__NLMSG_WRITE }, > + { AUDIT_WATCH_LIST, NETLINK_AUDIT_SOCKET__NLMSG_WRITE }, > }; Doesn't look like it'll drop into the audit.22 rpm as a simple replacement for the existing auditfs patch, so I'll have to do some merge work -- which means it'll probably be this evening (au time) at least before I get a new kernel out.