Re: [RFC][PATCH] (#5, U2) (resent) filesystem auditing support
On Tue, 2005-03-08 at 09:07 -0600, Timothy R. Chavez wrote:
> Putting this in the middle of the structure breaks binary
compatibility
> with existing audit userspace. I'll shift it to the end.
>
Ah yes, good point. Thanks
I have done so in the 2.6.9-5.0.3.EL.audit.10 package which is now in
the yum repository. That package also contains the '#5 U2' version of
your file system auditing code. Unfortunately it lacks the third attempt
at catching rdev,uid,gid correctly in audit_inode() -- I'm building an
audit.11 kernel now with that in, but I wanted to put the audit.10
kernel out there as soon as possible because the binary incompatibility
is holding Steve up with newer auditd code.
--
dwmw2