key in syscall audit rules.

[Steve Grubb]

On Wednesday 18 May 2005 11:28, Timothy R. Chavez wrote:
> but is it really worth all the extra complexity to try to decipher the
> meaning of "9" in userland?   

That's easy to say if you don't have to write the code ;)

> If we do decide to go with a string may we should consider a slab cache of
> keys that both the file system watches and syscalls can us?

I wonder what IPTables does? I believe the answer lies therein.

-Steve