[patch] Syscall auditing - move "name=" field to the end

Steve Grubb sgrubb at redhat.com
Thu Mar 17 20:53:22 UTC 2005


On Thursday 17 March 2005 15:32, Mounir Bsaibes wrote:
> Will Debora's patch make it to audit-0.6.9, or audit-0.7 ?

I haven't planned on it. The issue is that if you have a formatter, you need 
to have a parser to read it back. I'm just planning to dump it straight to 
logs and parse it as is.

-Steve




More information about the Linux-audit mailing list