Re: [PATCH] (1/2) new audit filter allows excluding messages by type (kernel)
Steve Grubb wrote:
On Wednesday 09 November 2005 08:46, Amy Griffis wrote:
>AUDIT_FILTER_USER is not syscall related and should not have been
>implemented as such. Stuffing it in the syscall filtering code was
>lazy.
I'm thinking that you are completely misunderstanding all of this.
Maybe you could explain?
-- ljk