public inbox for linux-audit@redhat.com
 help / color / mirror / Atom feed
* How to offer a patch
@ 2013-03-31  0:44 Burn Alting
  2013-04-02 18:55 ` Steve Grubb
  0 siblings, 1 reply; 2+ messages in thread
From: Burn Alting @ 2013-03-31  0:44 UTC (permalink / raw)
  To: linux-audit

All,

I've made some mods to auditctl to allow it to read a directory of 'rule
files'. The idea is that within an enterprise, one would distribute a
standard /etc/audit/audit.rules which can be updated from the corporate
repository. Should a system require localized audit rules, then a
directory containing files of rules can be maintained locally. The
reasoning for a directory as opposed to just an additional file is to
offer granularity of 'rule sets'.

I would like to know the convention for patching to this list. Should I
git clone the svn repository then supply a git diff? Can I just provide
an old-fashioned diff -rupN or C_ALL=C TZ=UTC0 diff -Naur?

Regards
Burn Alting

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: How to offer a patch
  2013-03-31  0:44 How to offer a patch Burn Alting
@ 2013-04-02 18:55 ` Steve Grubb
  0 siblings, 0 replies; 2+ messages in thread
From: Steve Grubb @ 2013-04-02 18:55 UTC (permalink / raw)
  To: linux-audit, burn

On Sunday, March 31, 2013 11:44:37 AM Burn Alting wrote:
> I've made some mods to auditctl to allow it to read a directory of 'rule
> files'. The idea is that within an enterprise, one would distribute a
> standard /etc/audit/audit.rules which can be updated from the corporate
> repository. Should a system require localized audit rules, then a
> directory containing files of rules can be maintained locally. The
> reasoning for a directory as opposed to just an additional file is to
> offer granularity of 'rule sets'.

See the previous email about SCAP limitations.


> I would like to know the convention for patching to this list. Should I
> git clone the svn repository then supply a git diff? Can I just provide
> an old-fashioned diff -rupN or C_ALL=C TZ=UTC0 diff -Naur?

As long as it can be applied with 'patch', I can figure out whether its -p0 or 
-p1. I generally go for the diff -urpN option. It probably doesn't need to be 
mentioned, but I don't like patches (or sections of patches) that only add 
formatting or white spaces to existing code.

Thanks,
-Steve

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2013-04-02 18:55 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-03-31  0:44 How to offer a patch Burn Alting
2013-04-02 18:55 ` Steve Grubb

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox