[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [patch] fix syscall speedup patch mips typo



On Wednesday 15 March 2006 15:24, Stephen Smalley wrote:
> So perhaps that information should be added to the avc messages?

But then when people are using the audit system and have rules, we have 
duplicated information. The way it is, we only have 2 pieces of duplicated 
information, comm & subj. But we have that duplication under normal 
circumstances, too.

>we would still have the full syscall audit records emitted since they would
>have audit rules? 

That is true.

-Steve


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]