[PATCH] auditfs updates to .46

David Woodhouse dwmw2 at infradead.org
Thu May 26 13:38:44 UTC 2005


On Thu, 2005-05-26 at 09:20 -0400, Steve Grubb wrote:
> We are talking about the case where an audit event would be generated but 
> can't because there's no context? If so, we have to record the event somehow.
> 
We're talking about the case where a watched file has been touched, but
the sysadmin has explicitly told the kernel that this task is _not_ to
be audited. 

-- 
dwmw2




More information about the Linux-audit mailing list