Hi all,

I am looking for the patch done by Rik Faith according to the webpage http://lwn.net/Articles/73623/. The link http://people.redhat.com/faith/audit/audit-20040226.1411.patch looks not available anymore.

I would like to check the patch to see clearly the code included in the kernel and what exactly were changed.

BTW, what is the main difference between the auditing syscall and the strace tool?

Does auditing syscall provide more accurate values?

Futhermore does auditing tool provide the time or elapsed time that a system call was allocated for each processor in a SMP platform? Does it trace the system call by processor?

BR,

Mauricio Lin.