From mboxrd@z Thu Jan  1 00:00:00 1970
From: Linda Knippers <linda.knippers@hp.com>
Subject: Re: [RFC] Do away with entry filter
Date: Fri, 27 Feb 2009 14:27:26 -0500
Message-ID: <49A83E9E.1040909@hp.com>
References: <200902270954.12237.sgrubb@redhat.com>
	<200902271240.12137.sgrubb@redhat.com> <49A8276E.3050806@hp.com>
	<200902271319.06607.sgrubb@redhat.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <200902271319.06607.sgrubb@redhat.com>
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: Steve Grubb <sgrubb@redhat.com>
Cc: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

Steve Grubb wrote:
> On Friday 27 February 2009 12:48:30 pm Linda Knippers wrote:
>> I'm suggesting changing the name to something that makes a little
>> more sense, or doing away with it if it isn't necessary for syscalls
>> anymore.  I'm assuming that's the case because there's no need to
>> distinguish it from "entry", so could we just drop "exit" and
>> ignore it (silently or otherwise) in the transition?
> 
> We still have user, task, and exclude filters. So we still need to be able to 
> specify them.

Sure, I'm only talking about the options that apply to syscalls.
If we don't need "entry" because we're going to make everything
work like "exit", then it seems like we don't need "exit" either.

-- ljk
> 
> -Steve