On Tue, Mar 13, 2007 at 03:00:46PM -0400, Amy Griffis wrote:
> + if (sid)
> + selinux_sid_to_string(sid, &context->obj_ctx, &len);
> +}
Why did you choose to do the sid to string conversion at collection
time, rather than waiting for audit_log_exit?
Narrower window for sid_to_context to change...