Re: Checking for audit_enabled in the kernel
On Tuesday 14 November 2006 14:01, Steve Grubb wrote:
A good example of how to do this is in audit.h:
Actually, this is wrong - disregard. This would be modeled more like sending a
user space rule into the kernel. In that case, audit_enabled is checked
directly. Its already a public variable but just not in the audit.h file to
prevent its proliferation. You can do this:
extern int audit_enabled;
in your file and use it.
-Steve