Re: [PATCH 2/2] SELinux Context Label based audit filtering
On Thu, 2006-02-02 at 15:42 -0500, Steve Grubb wrote:
On Thursday 02 February 2006 14:51, Dustin Kirkland wrote:
> This patch is against Steve Grubb's audit-1.1.13 audit release, plus a
> patch from Amy Griffis on 2006-02-02 that adds a couple of key functions
> needed to pass arbitrary length strings in audit rules to and from the
> kernel
Not sure I'll be able to merge this for a while. The current upstream kernel
won't have the right patches merged for quite some time. I will need to
continue adding features to audit package in the mean time...so I'll hold
onto the patch and merge when the time is right.
It looks like you're speaking of Amy's patch?
As of now, I'm taking your 1.1.13 tree, applying her patch, applying my
patch, and working from that. That's ok for now, but porting that stuff
forward might get old if applying those patches starts failing due to
other reasons.
What would you think of some compile-time experimental #ifdef sections?
Such that we can continue working/testing (especially our LSPP test team
developing test cases) but keeping it out of the code path for the
majority of your users?
Just a thought....
:-Dustin
Attachments:
- signature.asc (application/pgp-signature — 189 bytes)