Re: [PATCH v26 21/25] audit: add support for non-syscall auxiliary records

2021-05-21 Thread Paul Moore
On Thu, May 13, 2021 at 4:31 PM Casey Schaufler wrote: > > Standalone audit records have the timestamp and serial number generated > on the fly and as such are unique, making them standalone. This new > function audit_alloc_local() generates a local audit context that will > be used only for a st

[PATCH v26 21/25] audit: add support for non-syscall auxiliary records

2021-05-13 Thread Casey Schaufler
Standalone audit records have the timestamp and serial number generated on the fly and as such are unique, making them standalone. This new function audit_alloc_local() generates a local audit context that will be used only for a standalone record and its auxiliary record(s). The context is disca