Re: [RFC PATCH ghak90 (was ghak32) V3 06/10] audit: add containerid filtering

2018-07-20 Thread Paul Moore
On Wed, Jun 6, 2018 at 1:03 PM Richard Guy Briggs wrote: > Implement audit container identifier filtering using the AUDIT_CONTID > field name to send an 8-character string representing a u64 since the > value field is only u32. > > Sending it as two u32 was considered, but gathering and comparing

[RFC PATCH ghak90 (was ghak32) V3 06/10] audit: add containerid filtering

2018-06-06 Thread Richard Guy Briggs
Implement audit container identifier filtering using the AUDIT_CONTID field name to send an 8-character string representing a u64 since the value field is only u32. Sending it as two u32 was considered, but gathering and comparing two fields was more complex. The feature indicator is