On Tuesday 12 August 2008 18:11:48 John Dennis wrote:
> > With backwards compatibility you don't have to worry about having tools
> > of that era.
> >  
>
> This does not address the problem of matching a log file to a kernel
> version 

The kernel version is recorded in the daemon startup event.


> nor unanticipated user space provided audit records. 

The onus is with the developers to test their work. I did that for all the 
audit records I added throughout user space.

-Steve

--
Linux-audit mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/linux-audit

Reply via email to