Audit Parsing Library Requirements

Steve Grubb sgrubb at redhat.com
Mon Mar 13 18:27:33 UTC 2006


On Monday 13 March 2006 12:34, Kevin Carr wrote:
> It seems that the naming is a bit confusing then.  Should it be
> ausearch_state_t instead of auparse_state_t, as it is setting information
> related to the search. 

No, its general information. For example, the list of files has nothing to do 
with whether or not a search has been set or simple brute force iteration is 
being done.

-Steve




More information about the Linux-audit mailing list