From: Amy Griffis Date: Wed, 14 Jun 2006 22:45:21 +0000 (-0400) Subject: [PATCH] add rule filterkey X-Git-Tag: v2.6.18-rc1~191^2~3 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5adc8a6adc91c4c85a64c75a70a619fffc924817;p=pandora-kernel.git [PATCH] add rule filterkey Add support for a rule key, which can be used to tie audit records to audit rules. This is useful when a watched file is accessed through a link or symlink, as well as for general audit log analysis. Because this patch uses a string key instead of an integer key, there is a bit of extra overhead to do the kstrdup() when a rule fires. However, we're also allocating memory for the audit record buffer, so it's probably not that significant. I went ahead with a string key because it seems more user-friendly. Note that the user must ensure that filterkeys are unique. The kernel only checks for duplicate rules. Signed-off-by: Amy Griffis --- Reading git-diff-tree failed