Kernel audit output is inconsistent, hard to parse

Steve Grubb sgrubb at redhat.com
Thu Jan 31 21:21:37 UTC 2008


On Thursday 31 January 2008 16:11:38 Linda Knippers wrote:
> At one time we talked about converting to a binary record format.

At this point, I want things stable. I've spent the last 3 years working on 
the foundation to the audit system and we need to focus higher up the stack 
for a while. There's all kinds of neat things we can do if we don't keep 
reworking the bottom layer. :)

-Steve




More information about the Linux-audit mailing list