Re: LSM stacking v30 Audit changes
On Mon, Nov 29, 2021 at 2:27 PM Casey Schaufler <casey(a)schaufler-ca.com> wrote:
It would be really, really helpful if I could be feedback
on the v30 LSM stacking patches approach to gathering
supplemental audit records. I used a list scheme so as
to support other uses, such as container ID records. It's
what I would want. It's an easy change if it isn't what
y'all want. I'm eager to get this resolved.
FWIW, I had the last revision on the todo pile for review but there
was an unexpected number of issues that popped up and I never made it
through them before you posted v30. I've added the latest revision to
my todo list and hopefully I can get to them before the end of the
week.
--
paul moore
www.paul-moore.com