From: Steve G <linux_4ever_at_yahoo.com>
Date: Tue, 26 Apr 2005 13:18:05 -0700 (PDT)

>Isn't this unreliable anyway, e.g. your hook might queue up the audit
>message for processing by auditd, but auditd gets the signal before it
>handles the message and exits without emptying the queue?

The message would be in syslog in that scenario. It isn't there either.

-Steve                 

---

Do you Yahoo!?
Yahoo! Mail - Helps protect you from nasty viruses. http://promotions.yahoo.com/new_mail

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Received on Tue 26 Apr 2005 - 16:18:11 EDT