On Fri, 2005-04-01 at 20:51 +0100, David Woodhouse wrote:
On Fri, 2005-04-01 at 14:24 -0500, Stephen Smalley wrote:
> It just means that we keep the diff for auditsc.c as is, and drop the
> diff for avc.c, i.e. we add comm and exe logging to the syscall auditing
> but leave exe logging unmodified in the avc. Which I think is what
> David Woodhouse did already for his kernel since he wasn't sure about
> the avc change.
It is. Since it's now purely an audit patch, should I put it into the BK
tree?
IMHO, yes.
--
Stephen Smalley <sds(a)tycho.nsa.gov>
National Security Agency