From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: ABI guarantee for auditd Date: Thu, 15 Jan 2015 17:59:02 -0500 Message-ID: <3567295.SZ2jdmf0NG@x2> References: <3fbf5caa9cacbccadda7623eabadbc05@thefroid.net> <9201597.kpTtueEqur@x2> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: hsultan@thefroid.net Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Thursday, January 15, 2015 02:34:16 PM hsultan@thefroid.net wrote: > On 2015-01-15 12:44, Steve Grubb wrote: > > On Thursday, January 15, 2015 12:24:38 PM hsultan@thefroid.net wrote: > >> Regarding auditd, what is the ABI guarantee ? Do you guarantee that > >> the > >> text contained in audit_reply->msg.data will always be the same > >> format ? > >> I imagine you reserve the right to add fields, but how about > >> removing > >> any or even reordering them ? > > > > Its happens on occasion. Requirements change, bugs are found, new > > features asked for. > > Thanks, that tells me most of what I need, one last thing : do you > happen to know if the 'big' distribs(Ubuntu,RH,CentOS,Debian...) ship > those format changes only in new releases of their distribs, or do they > include them in patches for existing releases as well ? I can't speak for other distributions, but if I find a mistake in the audit records, I fix it to be right rather than hold ABI and stay forever wrong. This doesn't happen very often. The audit records are mostly stable. But there are 155 different records. -Steve