From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: [PATCH 4/4] Add the checking of key field for a watch or syscall given Date: Tue, 5 Aug 2008 09:49:25 -0400 Message-ID: <200808050949.25974.sgrubb@redhat.com> References: <48943410.5030400@cn.fujitsu.com> <200808042159.00711.sgrubb@redhat.com> <4897F77E.5060903@cn.fujitsu.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <4897F77E.5060903@cn.fujitsu.com> Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: zhangxiliang Cc: Linux Audit List-Id: linux-audit@redhat.com On Tuesday 05 August 2008 02:47:26 zhangxiliang wrote: > When the watch is added and AUDIT_PERM is not added, the perm r,w,x,a > should be added by kernel default. So I think the audit_permadded should be > set to 1 after a watch added. I make a new patch for it. The "key" patch > and new patch should use together. Applied. Thanks for the patch. -Steve