On Wed, 2009-04-08 at 20:39 +0200, Etienne Basset wrote:
 This patch creates auditing functions usable by LSM to audit
security
 events. It provides standard dumping of FS, NET, task etc ... events
 (code borrowed from SELinux)
 and provides 2 callbacks to define LSM specific auditing, which should be 
 flexible enough to convert SELinux too.
 
 Signed-off-by: Etienne Basset <etienne.basset(a)numericable.fr> 
Acked-by: Eric Paris <eparis(a)redhat.com>
Not worth doing another round, but if you do:
common_audit_data->function is (I think) SMACK specific, and probably
should live in the smack private union.