[PATCH] auditfs updates to .46
David Woodhouse
dwmw2 at infradead.org
Thu May 26 13:38:44 UTC 2005
On Thu, 2005-05-26 at 09:20 -0400, Steve Grubb wrote:
> We are talking about the case where an audit event would be generated but
> can't because there's no context? If so, we have to record the event somehow.
>
We're talking about the case where a watched file has been touched, but
the sysadmin has explicitly told the kernel that this task is _not_ to
be audited.
--
dwmw2
More information about the Linux-audit
mailing list