On Friday 15 August 2008 09:58:54 Matteo Michelini wrote: > I'm working on a binary format for the linux-audit system as part of a > university research project.
Big-endian/little-endian in aggregated logs? Will the kernel authors allow the encoder in the kernel? XDR was the only option we had last time. Versioning of structs? How do old user space tools work with new kernel that may change layout? Patents? -Steve -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit