Re: [PATCH v3] audit: add fields to exclude filter by reusing user filter

On Tue, Jun 21, 2016 at 10:38 PM, Richard Guy Briggs wrote: > RFE: add additional fields for use in audit filter exclude rules > https://github.com/linux-audit/audit-kernel/issues/5 > > Re-factor and combine audit_filter_type() with audit_filter_user() to > use audit_filter_user_rules() to enable

[PATCH v3] audit: add fields to exclude filter by reusing user filter

RFE: add additional fields for use in audit filter exclude rules https://github.com/linux-audit/audit-kernel/issues/5 Re-factor and combine audit_filter_type() with audit_filter_user() to use audit_filter_user_rules() to enable the exclude filter to additionally filter on PID, UID, GID, AUID, LOGI