From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stephen Quinney Subject: audit_ftype_to_name? Date: Fri, 18 Oct 2013 12:47:23 +0100 Message-ID: <20131018114722.GA14660@columba.inf.ed.ac.uk> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from mx1.redhat.com (ext-mx11.extmail.prod.ext.phx2.redhat.com [10.5.110.16]) by int-mx11.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id r9IBlRJG031248 for ; Fri, 18 Oct 2013 07:47:28 -0400 Received: from nougat.ucs.ed.ac.uk (nougat.ucs.ed.ac.uk [129.215.13.205]) by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id r9IBlOc0024369 for ; Fri, 18 Oct 2013 07:47:25 -0400 Received: from crunchie.inf.ed.ac.uk (crunchie.inf.ed.ac.uk [129.215.33.180]) by nougat.ucs.ed.ac.uk (8.13.8/8.13.4) with ESMTP id r9IBlN26021654 for ; Fri, 18 Oct 2013 12:47:23 +0100 (BST) Received: from columba.inf.ed.ac.uk (columba.inf.ed.ac.uk [129.215.25.31]) by crunchie.inf.ed.ac.uk (8.14.4/8.14.4) with ESMTP id r9IBlMUW013366 for ; Fri, 18 Oct 2013 12:47:22 +0100 Received: from columba.inf.ed.ac.uk (localhost [127.0.0.1]) by columba.inf.ed.ac.uk (8.14.4/8.14.4) with ESMTP id r9IBlNd4029148 for ; Fri, 18 Oct 2013 12:47:23 +0100 Received: (from squinney@localhost) by columba.inf.ed.ac.uk (8.14.4/8.14.4/Submit) id r9IBlNOf029144 for linux-audit@redhat.com; Fri, 18 Oct 2013 12:47:23 +0100 Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com I am wanting to use the audit_ftype_to_name function which is provided in the audit python module. It seems that this always returns None which is not particularly useful. I can see that the function is implemented in lib/lookup_table.c and it only does something when the NO_TABLES cpp macro is not defined. In src/mt/Makefile.am that is defined (with -DNO_TABLES in AM_CFLAGS), I assume that is deliberate? I can't see any definition of the ftype_i2s function which is called by audit_ftype_to_name so maybe this hasn't been implemented yet? Thanks, Stephen -- The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336.