On Tuesday, December 8, 2020 8:20:03 AM EST Richard Guy Briggs wrote: > > > By configure macro are you talking about the presence of that audit > > > status mask bit, or the presence of that struct audit_status member? > > > > Yes. But it doesn't apply to old kernels. > > An "or" question usually needs one or the other reply unless both are > true... Which one were you talking about?
Either. You shouldn't have one without the other. We just need to handle old user space/new kernel & new userspace/old kernel gracefully. -Steve -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit
