From mboxrd@z Thu Jan 1 00:00:00 1970 From: Alexander Viro Subject: Re: audit-ptrace patch (untested) Date: Tue, 13 Mar 2007 15:39:09 -0400 Message-ID: <20070313193909.GH12417@devserv.devel.redhat.com> References: <20070305145025.GC19390@devserv.devel.redhat.com> <1173192374.15967.115.camel@moss-spartans.epoch.ncsc.mil> <20070307031308.GA12417@devserv.devel.redhat.com> <1173271948.2050.17.camel@moss-spartans.epoch.ncsc.mil> <20070312122055.GC12417@devserv.devel.redhat.com> <20070313190046.GA18105@fc.hp.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Content-Disposition: inline In-Reply-To: <20070313190046.GA18105@fc.hp.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Alexander Viro , Stephen Smalley , Eric Paris , linux-audit@redhat.com, James Morris List-Id: linux-audit@redhat.com On Tue, Mar 13, 2007 at 03:00:46PM -0400, Amy Griffis wrote: > > + if (sid) > > + selinux_sid_to_string(sid, &context->obj_ctx, &len); > > +} > > Why did you choose to do the sid to string conversion at collection > time, rather than waiting for audit_log_exit? Narrower window for sid_to_context to change...