From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: Relying on syscall record for information and useless key/value duplication Date: Thu, 12 Jan 2012 09:00:49 -0500 Message-ID: <201201120900.49507.sgrubb@redhat.com> References: <1326316216.3710.13.camel@localhost> <201201112200.41660.sgrubb@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from x2.localnet (vpn-231-161.phx2.redhat.com [10.3.231.161]) by int-mx12.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id q0CE13jK002876 for ; Thu, 12 Jan 2012 09:01:03 -0500 In-Reply-To: <201201112200.41660.sgrubb@redhat.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Wednesday, January 11, 2012 10:00:41 PM Steve Grubb wrote: > Please, let's not go down this rat hole just yet. I'd rather catch up on > the known bugs in the audit system like > > https://bugzilla.redhat.com/show_bug.cgi?id=742562 We also have this bug: https://www.redhat.com/archives/linux-audit/2011-December/msg00030.html which really needs looking into more than reformatting the events. -Steve