On 2008-02-05, Dimitri Yioulos <[EMAIL PROTECTED]> wrote: > The only way I could get dazuko to compile was: > > ./configure --enable-syscalls --mapfile=/boot/System.map-2.6.1853.1.6.el5 > > Of course, I have no idea what using the "--enable-syscalls" switch > creates.
The "--enable-syscalls" switch tells Dazuko to capture file access events by hooking the system call table (instead of using the LSM interface). Hooking the system call table doesn't work on many kernels, but if it works for you, then it should be ok to use. (Typically system call hooking either works perfectly or it does not work at all. In your case, it works.) John Ogness -- Dazuko Maintainer _______________________________________________ Dazuko-help mailing list [email protected] http://lists.nongnu.org/mailman/listinfo/dazuko-help
