[RFC][PATCH] (#6) filesystem auditing

David Woodhouse dwmw2 at infradead.org
Thu Mar 17 15:28:16 UTC 2005


On Thu, 2005-03-17 at 10:23 -0500, Steve Grubb wrote:
> And what about wildcards? Does the watch code support wildcards or do
> they get rejected? I need to know so I can update the user space side.

The kernel knows nothing of wildcards. No wildcard handling is ever done
in-kernel; it's all userspace. The answers are "no" and "no". Wildcards
are not supported, but "*" won't get rejected either. "*" is a valid
file name, after all. You just need to be careful with your escaping in
bash when you try to remove it :)

-- 
dwmw2




More information about the Linux-audit mailing list