Date: Mon, 1 Mar 2004 19:45:01 +0000
From: Christoph Hellwig <hch@infradead.org>
To: Rik Faith <faith@redhat.com>, okir@suse.de
Cc: linux-kernel@vger.kernel.org
Subject: Re: [PATCH][RFC] Light-weight Auditing Framework
Message-ID: <20040301194501.A9080@infradead.org>
Mail-Followup-To: Christoph Hellwig <hch@infradead.org>,
	Rik Faith <faith@redhat.com>, okir@suse.de,
	linux-kernel@vger.kernel.org
References: <16451.25789.72815.763592@neuro.alephnull.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
In-Reply-To: <16451.25789.72815.763592@neuro.alephnull.com>; from faith@redhat.com on Mon, Mar 01, 2004 at 11:28:45AM -0500
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 790
Lines: 17

On Mon, Mar 01, 2004 at 11:28:45AM -0500, Rik Faith wrote:
> This note describes a patch against 2.6.4-rc1-bk2 that provides a
> low-overhead system-call auditing framework for Linux that is usable by
> LSM components (e.g., SELinux).  Comments will be appreciated.

I haven't actually looked at the code, but why don't you use Olaf Kirch's
auditing framework that's used in production and already has gotten the
wizzbang certification you seem to be aiming at.

Whether we want syscall auditing in mainline is a completely different
question..

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/