[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Audit Parsing Library Requirements




Steve Grubb <sgrubb redhat com> wrote on 03/09/2006 01:21:12 PM:

> On Thursday 09 March 2006 14:13, Michael C Thompson wrote:
> > My understanding of auserach is to set up our search paramters and
> > then call ausearch_next_event to begin returning records which match the
> > parameters we've set.
>
> Yes.
>
> > If this is the case, from a testing standpoint, it would be nice to be able
> > to set up the parameters on every value of the record as we expect it to
> > look.
>
> Please give an example to make sure I understand you.


Example:
chmod("myfile", 0777)

I would like to be able to specify to ausearch_set_param("a1", 0777). I did not see in my version of ausearch that it was possible to specify an argument field for a field/value pair. Again, on top of this, ausearch_set_param("a2",0) would be a good thing to add to ensure, as you expressed in last Monday's open LSPP call, that you would like regression tests run to ensure there was no uncleared context lying around.

Does this help?

Mike

>
> -Steve

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]