Re: [audit] Upstream solution for auditing file system objects

From: Chris Wright
Date: Fri Dec 10 2004 - 00:00:16 EST


* Robert Love (rml@xxxxxxxxxx) wrote:
> What we both need, ultimately, is a generic file change notification
> system. This way inotify, dnotify, your audit thing, and whatever else
> can hook into the filesystem as desired.

Yup, makes sense. From my handwavy perspective inotify was the generic
file event notifcation mechanism, but I agree with your point.

thanks,
-chris
--
Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/