From mboxrd@z Thu Jan  1 00:00:00 1970
From: "Sverdlin, Alexander (Nokia - DE/Ulm)" <alexander.sverdlin@nokia.com>
Subject: Re: [PATCH] audit: always enable syscall auditing when supported and
 audit is enabled
Date: Mon, 28 Jan 2019 15:38:12 +0000
Message-ID: <8bf5d613-9b27-381d-283b-c8892483f424@nokia.com>
References: <20151208164237.15736.42955.stgit@localhost>
 <5490ae28-251b-bfda-38a6-5be201a4a8d8@nokia.com>
 <CAHC9VhQsVFY1LAakAUUCBZw6nmSy0-eoFrhQgVQrkqgAsWVGhQ@mail.gmail.com>
 <4fb6def1-a1d9-8af0-394c-f92224884d18@nokia.com>
 <CAHC9VhT1T4wTonW_L8CH2j1aMqSaBcUf-zH==233+ZZvSKhkwg@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Return-path: <linux-kernel-owner@vger.kernel.org>
In-Reply-To: <CAHC9VhT1T4wTonW_L8CH2j1aMqSaBcUf-zH==233+ZZvSKhkwg@mail.gmail.com>
Content-Language: en-US
Content-ID: <69EF7DAF3C209A418798C56E686D8F6D@eurprd07.prod.outlook.com>
Sender: linux-kernel-owner@vger.kernel.org
To: Paul Moore <paul@paul-moore.com>
Cc: Paul Moore <pmoore@redhat.com>, "linux-audit@redhat.com" <linux-audit@redhat.com>, Richard Guy Briggs <rbriggs@redhat.com>, Greg Kroah-Hartman <gregkh@linuxfoundation.org>, Alexei Starovoitov <ast@kernel.org>, Daniel Borkmann <daniel@iogearbox.net>, "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>
List-Id: linux-audit@redhat.com
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