3:58 p.m.
Hello,
I was repatching the trusted apps and got to looking at the resulting
messages. The attached patch: removes uid - not needed since its always 0,
removes length - who cares, and changes loginuid to auid for consistency.
-Steve
4:12 p.m.
--- Steve Grubb <sgrubb(a)redhat.com> wrote:
Perhaps today, but remember that someday when
capabilities are complete you may have a
trusted application that does not run as root.
Casey Schaufler
casey(a)schaufler-ca.com
__________________________________
Yahoo! Mail Mobile
Take Yahoo! Mail with you! Check email on your mobile phone.
http://mobile.yahoo.com/learn/mail
10:37 a.m.
On Wednesday 18 May 2005 17:12, Casey Schaufler wrote:
you may have a trusted application that does not run as root.
Ok. Another round that preserves uid. This patch removes length since user
space doesn't need it and changes loginuid to auid for consistency with other
parts of the audit system.
Signed-off-by: Steve Grubb
2:28 p.m.
Steve Grubb:
Ok. Another round that preserves uid. This patch removes length since
user
space doesn't need it and changes loginuid to auid for
consistency with
other
parts of the audit system.
I'm wondering about the need for changing loginuid to auid. You mentioned
consistency with other parts of audit, but loginuid has been a consistent
field
nearly all our tests check. Small changes like this are impacting our
tests,
and loginuid seems more intuitive as being the original login uid. ???
2:46 p.m.
On Thursday 19 May 2005 15:28, Kris Wilson wrote:
I'm wondering about the need for changing loginuid to auid.
We have both loginuid and auid (still). I think we should pick one. auid has
less characters and saves disk space. I wished that we could consolidate the
whole mess in one fell swoop so that we don't have to explain why some have
auid and some have loginuid. Syscall is the one that wastes the most
diskspace.
-Steve
5:19 p.m.
linux-audit-bounces(a)redhat.com wrote on 05/19/2005 03:10:38 PM:
On Thu, 2005-05-19 at 15:46 -0400, Steve Grubb wrote:
> We have both loginuid and auid (still). I think we should pick one.
auid has
> less characters and saves disk space. I wished that we could
consolidate the
> whole mess in one fell swoop so that we don't have to
explain why some
have
html or not, these constant changes which require modification to all
testcases are impacting our schedule. At some point you need to stop
making changes for this release just because they are nice to have, and
we have already passed that point.
7:55 a.m.
On Thursday 19 May 2005 18:19, Kris Wilson wrote:
these constant changes which require modification to all testcases
are
impacting our schedule.
They also require changes to user space. I'm making the changes and they are
trivial. I'm concerned that when our technical writers try to document the
product, we will look like we didn't have a plan and couldn't make up our
minds. I'm also 100% sure people will complain about the disk usage. If
there's an easy, small step that gets us some disk space, I want to take it.
At some point you need to stop making changes for this release just
because
they are nice to have
We know. We are working as fast as we can.
-Steve
7282
days inactive
7284
days old
linux-audit@lists.linux-audit.osci.io
9 comments
5 participants
participants (5)
-
Casey Schaufler -
Chris Wright -
David Woodhouse -
Kris Wilson -
Steve Grubb