Re: [RFC][PATCH 0/3] Introduce audit_syscall LSM hook

From: Adrian Drzewiecki (z@private)
Date: Wed Dec 08 2004 - 11:45:31 PST 

> > Chris,
> >  For me the need for this patch was an LSM that I was working on which 
> > wanted to keep track of the system calls that a task called. This was the 
> > cleanest way for me do this. 
> 
> But what is wrong with the audit subsystem that is already in the kernel
> tree?  It should provide for this kind of notification, right?
> 
> thanks,
> 
> greg k-h

Greg,
 There is nothing wrong with the audit subsystem. The only problem that 
I have is the lack of system-call sandboxing in LSM.

-Adrian

This archive was generated by hypermail 2.1.3 : Wed Dec 08 2004 - 11:46:00 PST