On 3/31/06, Steve Grubb <[EMAIL PROTECTED]> wrote: > On Friday 10 March 2006 14:25, Dustin Kirkland wrote: > > 2) Support for an AUDIT_IPC_NEW_PERM audit message type. This allows > > for separate auxiliary audit records for normal operations on an IPC > > object and permissions changes. Note that the same struct > > audit_aux_data_ipcctl is used and populated, however there are separate > > audit_log_format statements based on the type of the message. > > Can we have another name for this record type? I don't want us to get in the > habit of adding "new" to the record type name. Is there something that better > describes its purpose?
I know we discussed on IRC, but for everyone's benefit, we're going to call this record type AUDIT_IPC_SET_PERM and the function audit_ipc_set_perm(), as it's called in each of the IPC_SET operations on the ipc objects. :-Dustin -- Linux-audit mailing list [EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/linux-audit
