[PATCH 1/2] fix auditctl -D

Steve Grubb sgrubb at redhat.com
Fri Apr 28 23:04:06 UTC 2006


On Friday 28 April 2006 18:35, Joy Latten wrote:
> The fix for the problem of auditctl -D not working
> consists of two patches. One is the userspace patch
> and the other is for the kernel.

Joy,

Thanks for sending this patch. I will add a variation of this to the auditctl 
source. The problem is that if someone uses new tools on old kernels, it 
won't work. 

I have been coding up a patch that catches all the rules as a linked list and 
then bounces them back to the kernel after the download is complete. This 
solves the same problem for older kernels. After the kernel hits 2.6.20 or 
something like that, I'll switchover completely to your patch.

-Steve




More information about the Linux-audit mailing list