[PATCH] IPC_SET_PERM cleanup

Steve Grubb sgrubb at redhat.com
Tue May 9 19:11:25 UTC 2006


On Tuesday 09 May 2006 14:27, Linda Knippers wrote:
> I wasn't actually proposing that we do that.  I was really trying to
> make the point that including the iuid and new_iuid fields in with
> the results of a uid search, which is what Steve was proposing as a
> good thing, doesn't seem right to me.  

OK, big picture time...the fields are used by the search API. The application 
that calls the library can then consult other information to decide if this 
is a record of interest. Ausearch is one such application, but I'm not saying 
that ausearch at the command line will return all those - I'm talking about 
the search API. In retrospect, the user I was referring to is the person 
doing the programming. Sorry for misleading you on this.

Bottom line, for the search API, I want all similar types to have a common 
field name. They can have a modifier adjacent to them.

>Maybe I should use a5, a6, ...,

Please no. Let's keep it as iuid or ouid. I'd personally prefer to drop iuid 
so we can consolidate field types. ouid means "owner's uid".

-Steve




More information about the Linux-audit mailing list