From mboxrd@z Thu Jan 1 00:00:00 1970 From: Casey Schaufler Subject: Re: Kernel audit output is inconsistent, hard to parse Date: Thu, 31 Jan 2008 14:43:32 -0800 (PST) Message-ID: <249330.697.qm@web36615.mail.mud.yahoo.com> References: <200801311659.28042.paul.moore@hp.com> Reply-To: casey@schaufler-ca.com Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Return-path: Received: from mx3.redhat.com (mx3.redhat.com [172.16.48.32]) by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id m0VMi8hb024260 for ; Thu, 31 Jan 2008 17:44:08 -0500 Received: from web36615.mail.mud.yahoo.com (web36615.mail.mud.yahoo.com [209.191.85.32]) by mx3.redhat.com (8.13.1/8.13.1) with SMTP id m0VMhbWr016421 for ; Thu, 31 Jan 2008 17:43:37 -0500 In-Reply-To: <200801311659.28042.paul.moore@hp.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Paul Moore , linux-audit@redhat.com List-Id: linux-audit@redhat.com --- Paul Moore wrote: > On Thursday 31 January 2008 4:21:37 pm Steve Grubb wrote: > > On Thursday 31 January 2008 16:11:38 Linda Knippers wrote: > > > At one time we talked about converting to a binary record format. > > > > At this point, I want things stable. I've spent the last 3 years work= ing on > > the foundation to the audit system and we need to focus higher up the= stack > > for a while. There's all kinds of neat things we can do if we don't k= eep > > reworking the bottom layer. :) >=20 > ... Neat things like building castles on the sand? ;) >=20 > (Sorry, couldn't resist!) There's also the conversion from SELinux interfaces to LSM interfaces that I'll be revisiting before long. Always a pain to have to do something like that during a rewrite. Casey Schaufler casey@schaufler-ca.com