Re: [PATCH] audit: use audit_log_task_info in audit_core_dumps and __audit_seccomp
On Monday, January 13, 2014 09:56:35 PM Eric Paris wrote:
It seems that reusing the task info pattern throughout records
should
allow for faster simpler more streamlined userspace records parsing, but
changing order like this might be a deal breaker.
Have you tried using the ausearch test suite? I published it so that it can be
found out what all these patches will do to the stability of user space. I'd
delete your logs, reboot into test kernel, generate as many kind of events as
possible, then extract the logs and test with the test suite.
-Steve