Re: [RFC][PATCH 0/2] (#6 U2) filesystem auditing
On Tue, 2005-03-29 at 11:19 -0500, Stephen Smalley wrote:=
> I'm also going to break up the patches into:
>
> Audit Subsystem Patch
> Hook patch
I'm not sure I see the point. In order to understand the hooks, you
have to see how they are used, and unlike (say) LSM, there is only a
single user of the hooks.
Presumably that point is that the hooks are what's of most interest to
Linux developers in general; the actual audit code can be treated as a
black box so can reasonably be posted separately.
--
dwmw2