[PATCH v2] audit: add feature audit_lost reset

Steve Grubb sgrubb at redhat.com
Fri Dec 16 03:12:00 UTC 2016


On Thursday, December 15, 2016 7:50:48 PM EST Paul Moore wrote:
> On Thu, Dec 15, 2016 at 7:22 PM, Steve Grubb <sgrubb at redhat.com> wrote:
> > I'm planning to replace all the config change logging with the
> > audit_log_task_simple function I sent so that we have everything. Can we
> > go ahead and pull that in so that we can start using it?
> 
> There needs to be more than one user of the function to make it
> worthwhile; so far that function has only been proposed with a single
> user.  Propose it with multiple users and we can look at it seriously.

That's because I have several unrelated patches that use it. Do you want me to 
send all of them at once? There's going to be at least 5 users of the 
function. Possibly more. I want it to be the default for all future events 
added because it concisely gives the necessary information for well-formed 
events.

-Steve




More information about the Linux-audit mailing list