On Friday 28 April 2006 18:35, Joy Latten wrote:
The fix for the problem of auditctl -D not working
consists of two patches. One is the userspace patch
and the other is for the kernel.
Joy,
Thanks for sending this patch. I will add a variation of this to the auditctl
source. The problem is that if someone uses new tools on old kernels, it
won't work.
I have been coding up a patch that catches all the rules as a linked list and
then bounces them back to the kernel after the download is complete. This
solves the same problem for older kernels. After the kernel hits 2.6.20 or
something like that, I'll switchover completely to your patch.
-Steve