[PATCH] Fix (make check)

2007-11-18 Thread Miloslav Trmac
Hello, (make check) currently builds tests against libaudit headers installed system-wide; if no headers are installed, the build fails. The attached patch fixes the build. Mirek diff -urN audit/auparse/test/Makefile.am audit-1.6.2/auparse/test/Makefile.am ---

[PATCH] ausearch improvements

2007-11-18 Thread Miloslav Trmac
Hello, the attached patch adds some functionality to ausearch. It consists of two main parts: ausearch_add_interpreted_item() behaves like ausearch_add_item(), but the conditions are evaluated by comparing the interpreted field value, not the raw value (e.g. (uid, =, mitr) instead of (uid, =,

Re: [PATCH] Audit: EINTR instead of kernel private return codes in audit records

2007-11-18 Thread Eric Paris
On Sun, 2007-11-18 at 05:58 -0500, Steve Grubb wrote: On Saturday 17 November 2007 08:58:33 pm Eric Paris wrote: It would be absolutely wrong for the audit system to translate even ENOIOCTLCMD to anything else if this is what was actually returned to the process. The point is, none of