Aside from the refcounting in the previous patch being bad, which you
likely didn't make any better here, I think I'm ok with
audit_put_mark/audit_get_mark being exposed and used instead of the
fsnotify_* calls being used directly...
On Tue, 17 Jun 2014 23:09:49 -0400
Richard Guy Briggs
On 14/06/18, Eric Paris wrote:
Aside from the refcounting in the previous patch being bad, which you
likely didn't make any better here, I think I'm ok with
audit_put_mark/audit_get_mark being exposed and used instead of the
fsnotify_* calls being used directly...
I still need to convince
---
kernel/audit.h |2 ++
kernel/audit_fsnotify.c |6 +++---
kernel/auditfilter.c| 10 +-
3 files changed, 10 insertions(+), 8 deletions(-)
diff --git a/kernel/audit.h b/kernel/audit.h
index 2093c5e..3151ae5 100644
--- a/kernel/audit.h
+++ b/kernel/audit.h
@@
