Re: [PATCH][RFC] Light-weight Auditing Framework

[Christoph Hellwig]

On Mon, Mar 01, 2004 at 11:28:45AM -0500, Rik Faith wrote:
> This note describes a patch against 2.6.4-rc1-bk2 that provides a
> low-overhead system-call auditing framework for Linux that is usable by
> LSM components (e.g., SELinux).  Comments will be appreciated.

I haven't actually looked at the code, but why don't you use Olaf Kirch's
auditing framework that's used in production and already has gotten the
wizzbang certification you seem to be aiming at.

Whether we want syscall auditing in mainline is a completely different
question..

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/