Re: audit.19 kernel
On Fri, 2005-04-08 at 16:34 +0100, David Woodhouse wrote:
On Fri, 2005-04-08 at 10:15 -0500, Timothy R. Chavez wrote:
> > I am seeing an inconsistent behavior when testing the watches with this
> > kernel. Is anybody else encountering something similar?
> >
>
> Just to be clearer, we tested on my working-version of the code, and I _do_
> receive records. I've not touched audit_attach/notify_watch() either.
I'll double-check my backport of your code.
What file system are you testing on? Does it have its own permission()
routine? I put the audit_notify_watch() in vfs_permission() instead of
permission() by mistake; I'm building an audit.20 with that fixed.
--
dwmw2