On Wed, Mar 31, 2010 at 12:17:11AM +0200, Juraj Hlista wrote: > From: Juraj Hlista <[email protected]> > > Add support for reactive rules. An audit rule can contain more than one > reaction. The reactions are identified by numbers in the kernel and by > strings in the user space.
Huh? We already have a way to associate a unique key with a rule; what does that patch offer that can't be happily handled by userland with what we already have? -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
