Re: auditctl bug: load rules from file
On Tuesday 26 July 2005 17:33, Amy Griffis wrote:
Shouldn't this be checked in kernel?
That was my preference. I don't think they wanted to do it, though. The
problem truly is a kernel problem as auditctl may not be the only utility in
the future.
Versus userspace having to get the list of rules from the kernel and
walk
through it?
Which way were you thinking?
Get the list and walk it.
-Steve