Re: [PATCH v19 21/23] Audit: Add a new record for multiple object LSM attributes
On Fri, 24 Jul 2020, Casey Schaufler wrote:
Create a new audit record type to contain the object information
when there are multiple security modules that require such data.
This record is emitted before the other records for the event, but
is linked with the same timestamp and serial number.
Signed-off-by: Casey Schaufler <casey(a)schaufler-ca.com>
Cc: linux-audit(a)redhat.com
These audit patches will need ack/review from Paul.
--
James Morris
<jmorris(a)namei.org>