Re: Getting the program name in audit messages
On Fri, 2005-04-01 at 14:24 -0500, Stephen Smalley wrote:
It just means that we keep the diff for auditsc.c as is, and drop
the
diff for avc.c, i.e. we add comm and exe logging to the syscall auditing
but leave exe logging unmodified in the avc. Which I think is what
David Woodhouse did already for his kernel since he wasn't sure about
the avc change.
It is. Since it's now purely an audit patch, should I put it into the BK
tree?
--
dwmw2