Re: [RFC] Virtual machine related events support
On Tuesday, December 06, 2011 03:31:21 PM Marcelo Cerri wrote:
I'm already coding the auvirt tool and I'd like to add
command line
options similar to "--start" and "--end" from ausearch.
Looking into ausearch code I found two functions (ausearch_time_end and
ausearch_time_start) that already parse date and time informed and
support some interesting options as "now", "today",
"week-ago" and etc.
Do you think there would be a problem in use these functions in auvirt?
Actually, that would be nice for consistency. But it sounds like you are headed
towards calls to the search API to setup the time fields. Just to double check,
is all this work is under the same license as the audit package is claiming?
(LGPL/GPL). If so there's definitely not a problem.
-Steve