On Wednesday, February 22, 2017 9:50:54 PM EST Richard Guy Briggs wrote: > Simplify and eliminate flipping in and out of message fields, relying on > nfmark the way we do for audit_key. > > https://github.com/linux-audit/audit-kernel/issues/11 > > Signed-off-by: Richard Guy Briggs <r...@redhat.com>
If this is reworked, do you mind including a raw log event in the explanation part of the patch? I need to see the resulting event to see how user space needs to adapt. Thanks, -Steve -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit
