Re: Checking for audit_enabled in the kernel

Steve Grubb
2006-11-14T19:07:34Z

On Tuesday 14 November 2006 14:01, Steve Grubb wrote:
> A good example of how to do this is in audit.h:

Actually, this is wrong - disregard. This would be modeled more like sending a
user space rule into the kernel. In that case, audit_enabled is checked
directly. Its already a public variable but just not in the audit.h file to
prevent its proliferation. You can do this:

extern int audit_enabled;

in your file and use it.

-Steve