On Sunday 08 February 2009 09:42:42 pm Mimi Zohar wrote:
diff --git a/security/integrity/ima/ima_audit.c
b/security/integrity/ima/ima_audit.c new file mode 100644
index 000..8a0f1e2
--- /dev/null
+++ b/security/integrity/ima/ima_audit.c
+void integrity_audit_msg(int
Is there a way to specify on the command line a way to tell the
audit-viewer to read a specific raw event file?
Thx,
LCB.
--
LC (Lenny) Bruzenak
le...@magitekltd.com
--
Linux-audit mailing list
Linux-audit@redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit
Hello,
- LC Bruzenak le...@magitekltd.com wrote:
Is there a way to specify on the command line a way to tell the
audit-viewer to read a specific raw event file?
No.
Mirek
--
Linux-audit mailing list
Linux-audit@redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit
On Mon, 2009-02-09 at 09:51 -0500, Steve Grubb wrote:
On Sunday 08 February 2009 09:42:42 pm Mimi Zohar wrote:
diff --git a/security/integrity/ima/ima_audit.c
b/security/integrity/ima/ima_audit.c new file mode 100644
index 000..8a0f1e2
--- /dev/null
+++
- Force audit result to be either 0 or 1.
- make template names const
- Add new stand-alone message type: AUDIT_INTEGRITY_RULE
Signed-off-by: Mimi Zohar zo...@us.ibm.com
---
diff --git a/include/linux/audit.h b/include/linux/audit.h
index 930939a..4fa2810 100644
--- a/include/linux/audit.h
+++