[Apparmor-dev] [rfc] Addition of 'epoch' to aa_log_record

Steve Beattie sbeattie at suse.de
Wed Aug 15 14:26:35 MDT 2007


On Wed, Aug 15, 2007 at 11:51:07AM -0700, Matt Barringer wrote:
> ddrewelow requested that we include the audit timestamp separately from 
> the audit id in aa_log_record (bug ID# 300405).  The attached patch adds 
> the field and sets it from grammar.y, when we recreate the audit id.  If I 
> don't hear any negative feedback, I'll check it into SVN & autobuild this 
> afternoon.

Looks fine to me. I wonder if we'll want access to the audit event id
(or whatever the monotonically increasing number after the colon is
called) as well?

Hold off on checking into autobuild just yet (unless there's an urgent
reason to do so); I've got some other bits for libapparmor I need to
check in as well.

-- 
Steve Beattie
SUSE Labs, Novell Inc. 
<sbeattie at suse.de>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://forge.novell.com/pipermail/apparmor-dev/attachments/20070815/1c7891cf/attachment.pgp


More information about the Apparmor-dev mailing list