[RFC][PATCH] (#5, U3) filesystem auditing

[Timothy R. Chavez]

On Tuesday 08 March 2005 05:53 pm, Timothy R. Chavez (GMail) wrote:
> Hello,
>
> - This patch reorders the hooks to be consistently placed above the
> security hooks (Thanks Serge).
>
> - It also removes the audit_notify_watch() hooks from vfs_rmdir and
> vfs_unlink and places it in may_delete() (Thanks Stephen).
>
> - Stripped out the auditfs_enable feature because there was no outstanding
> use-case for it.  We determined it was sufficient to have the compile time
> configure option only.  (Thanks David, Thanks Steve).
>
> Sorry I didn't get this out sooner David.
>
> Also, what I'm doing with reference counting and locking doesn't seem to be
> too clear (and it really isn't) -- I apologize for that.  Though this will
> all be described in detail in a document, I'll go ahead and send out an
> e-mail explaining what's going on.
>
>
> -tim

Just a quick note.  Loulwa received a kernel panic this morning when rebooting with patch #5 U3.  I was unable to look at the panic message (it was related to the VFS) she got earlier and I've not received such a panic on my machine with the patch applied.  If you do happen to patch with #5 U3 can you tell me what architecture you patched on and booted with and if you got a panic (and any other information you could gather associated with the panic) or not.  It's my intention to test this code on as many platforms as possible, but I'm really short on time at the moment.
Thanks.
-tim
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20050309/3bf11acd/attachment.htm>