watch dir problem

[Timothy R. Chavez]

On Thursday 26 May 2005 15:03, Steve Grubb wrote:
> On Thursday 26 May 2005 15:46, Timothy R. Chavez wrote:
> > Is the inode being reported the inode of audit/ or audit.log?
> 
> logs have long since been rotated. I'll try to recreate in better way.
> 
> Also, I've been torturing my machine with rule & watch insertion for over an 
> hour. It seems to be doing fine. Maybe the undersized allocation was causing 
> all my problems.

Are you using a .49 or .50 kernel?  I wasn't quite sure if David said "OK" to just
using the hash table from now on or to use the i_audit field until we're in the
clear.

David has incorporated most of the cleanups I had and then he made some 
more which I've also added to my tree.. and the last major thing I can think of
is to correctly handle audit_notify_watch() in fs/namei.c

-tim

> 
> -Steve
> 
> --
> Linux-audit mailing list
> Linux-audit at redhat.com
> http://www.redhat.com/mailman/listinfo/linux-audit
> 
>