From mboxrd@z Thu Jan  1 00:00:00 1970
From: "Timothy R. Chavez" <tinytim@us.ibm.com>
Subject: Re: Auditing File Changes
Date: Mon, 10 Jul 2006 16:08:47 -0500
Message-ID: <1152565727.18406.30.camel@localhost.localdomain>
References: <20060710193214.95422.qmail@web36606.mail.mud.yahoo.com>
	<200607101942.k6AJgUo2016221@turing-police.cc.vt.edu>
	<1152561408.4275.17.camel@fryspc>
	<1152564952.18406.21.camel@localhost.localdomain>
Mime-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
Received: from mx3.redhat.com (mx3.redhat.com [172.16.48.32])
	by int-mx1.corp.redhat.com (8.12.11.20060308/8.12.11) with ESMTP id
	k6AL98OB027080
	for <linux-audit@redhat.com>; Mon, 10 Jul 2006 17:09:08 -0400
Received: from e35.co.us.ibm.com (e35.co.us.ibm.com [32.97.110.153])
	by mx3.redhat.com (8.13.1/8.13.1) with ESMTP id k6AL8vYS006371
	for <Linux-audit@redhat.com>; Mon, 10 Jul 2006 17:09:03 -0400
Received: from d03relay04.boulder.ibm.com (d03relay04.boulder.ibm.com
	[9.17.195.106])
	by e35.co.us.ibm.com (8.12.11.20060308/8.12.11) with ESMTP id
	k6AL8ol1031602
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)
	for <Linux-audit@redhat.com>; Mon, 10 Jul 2006 17:08:50 -0400
Received: from d03av01.boulder.ibm.com (d03av01.boulder.ibm.com [9.17.195.167])
	by d03relay04.boulder.ibm.com (8.13.6/NCO/VER7.0) with ESMTP id
	k6AL8miS155310
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <Linux-audit@redhat.com>; Mon, 10 Jul 2006 15:08:49 -0600
Received: from d03av01.boulder.ibm.com (loopback [127.0.0.1])
	by d03av01.boulder.ibm.com (8.12.11.20060308/8.13.3) with ESMTP id
	k6AL8lWi007446
	for <Linux-audit@redhat.com>; Mon, 10 Jul 2006 15:08:48 -0600
In-Reply-To: <1152564952.18406.21.camel@localhost.localdomain>
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: LC Bruzenak <lenny@bruzenak.com>
Cc: Linux-audit@redhat.com, Valdis.Kletnieks@vt.edu
List-Id: linux-audit@redhat.com

On Mon, 2006-07-10 at 15:55 -0500, Timothy R. Chavez wrote:
> If you issue 100 writes() in between an open() and an exit(), what does
                                                        ^^^^^
*cough* close() *cough* oops ;-)

-tim