On Wednesday 14 February 2007 13:24:31 Amy Griffis wrote: > Add a syscall class for sending signals.
The intent of the syscall classes had been to make an update independent way of being able to specify audit rules for filesystem auditing where new syscalls could be added. I don't know if this grouping would be useful in practice. <shrug> What I have been thinking about is a grouping for delete and close. That would align with requirements on security standards people have to meet. -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
