On Friday 15 August 2008 09:58:54 Matteo Michelini wrote:
> I'm working on a binary format for the linux-audit system as part of a
> university research project.

Big-endian/little-endian in aggregated logs? Will the kernel authors allow the 
encoder in the kernel? XDR was the only option we had last time. Versioning 
of structs? How do old user space tools work with new kernel that may change 
layout? Patents?

-Steve

--
Linux-audit mailing list
Linux-audit@redhat.com
https://www.redhat.com/mailman/listinfo/linux-audit

Reply via email to