On 10/19/05, Amy Griffis <amy.griffis(a)hp.com> wrote:
The following two patches augment the collection of inode info
during
syscall processing. They represent part of the functionality that was
provided by the auditfs patch included in RHEL4.
Thanks, Amy.
I've done a fair amount of testing with these patches, and think
it
would be good if we could start providing a test kernel for filesystem
auditing patches. I think this should be separate from an audit-lspp
test kernel.
Just out of curiosity, why is that? Are you suggesting that these inode
auditing patches should be in a separate tree than the subj/obj labeling
patches that I submitted?
:-Dustin