On Tuesday 16 May 2006 18:51, Lisa Smith wrote:
> Instead of introducing a new user space tunable to determine how to
> handle an audit failure, what if we used the kernel's audit_failure
> variable that already exists?  

What if syscall audit is not compiled into the kernel? Would that map to 
ignore?

-Steve

--
redhat-lspp mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/redhat-lspp

Reply via email to