Re: [PATCH] selinux: add tracepoint on denials

[ThiÃbaud Weksteen]

On Tue, Jul 28, 2020 at 3:12 PM Steven Rostedt <rostedt@xxxxxxxxxxx> wrote:
> Where in that document does it say that trace events have a fixed size.
> We have a lot of dynamically sized trace events.

My mistake. From the "format" pseudo-file, I assumed the offset and
size were fixed.

> Please take a look at samples/trace_events/trace_events_sample.h
> and read the example on __print_symbolic().
> I think that's what you are looking for.

Ack, thanks for pointing these out. I still think that my other
argument (i.e. duplication of avc message) holds.