auditctl bug: load rules from file

Amy Griffis amy.griffis at hp.com
Tue Jul 26 21:33:30 UTC 2005


Steve Grubb wrote:     [Tue Jul 26 2005, 05:27:58PM EDT]
> On Tuesday 26 July 2005 17:23, Timothy R. Chavez wrote:
> > This isn't a userspace issue, but do you think this should be permitted?
> > ?I'd expect a "Rule already exists" type error *shrug*
> 
> This is already on the TODO list. I'll try to fix this in the next round of 
> development.

Shouldn't this be checked in kernel?  Versus userspace having to get
the list of rules from the kernel and walk through it?

Which way were you thinking?

Amy




More information about the Linux-audit mailing list