Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1759821AbYLQHse (ORCPT ); Wed, 17 Dec 2008 02:48:34 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1752083AbYLQHsY (ORCPT ); Wed, 17 Dec 2008 02:48:24 -0500 Received: from tundra.namei.org ([65.99.196.166]:2006 "EHLO tundra.namei.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751005AbYLQHsY (ORCPT ); Wed, 17 Dec 2008 02:48:24 -0500 Date: Wed, 17 Dec 2008 18:48:08 +1100 (EST) From: James Morris To: Al Viro cc: linux-audit@redhat.com, linux-kernel@vger.kernel.org Subject: Re: [PATCH 11/15] fixing audit rule ordering mess, part 1 In-Reply-To: Message-ID: References: User-Agent: Alpine 1.10 (LRH 962 2008-03-14) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, 17 Dec 2008, Al Viro wrote: > > Problem: ordering between the rules on exit chain is currently lost; > all watch and inode rules are listed after everything else _and_ > exit,never on one kind doesn't stop exit,always on another from > being matched. > > Solution: assign priorities to rules, keep track of the current > highest-priority matching rule and its result (always/never). > > Signed-off-by: Al Viro Reviewed-by: James Morris -- James Morris -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/