On Monday 02 July 2007 04:43:47 pm John Dennis wrote: > I'm not 100% positive, but I believe the work done to support > AUDIT_AVC_PATH by capturing path information prior to sys call > transition where only the inode is passed to the kernel will now result > in complete path information in other audit records as well, perhaps > Steve Grubb can give precise information on this.
Not to my knowledge. AFAIK, changes for AVC only affect AVC's and nothing else. -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
