On Thursday 15 May 2008 11:40:55 pm chuli wrote: > I have read source code in Audit-1.6.5 about auditd part. I looked up > into > functions equeue_event(),event_thread_main() in > Auditd-event.c,get_reply(),send_audit_event() and main function in > Auditd.c. I don't know why it must use a list (auditd_reply_list) here.
As the code stands today, it does not need it. I keep the project's future development needs/goals in a TODO file at the top directory in the source tarball. I have a goal of making an internal queue between the listener and disk writing threads. What I wanted to do was get it working in audispd and then backport that same queue mechanism into auditd. But I wanted it to get tested out before pulling it into the more critical auditd code. I plan to add this internal queue in the 2.0 series which should start in the next month or two. -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
