Messages in this thread | | | Subject | Re: Connector: Filesystem Events Connector v3 | From | Arjan van de Ven <> | Date | Fri, 24 Mar 2006 15:28:43 +0100 |
| |
On Fri, 2006-03-24 at 22:24 +0800, yang.y.yi@gmail.com wrote: > On 3/24/06, Arjan van de Ven <arjan@infradead.org> wrote: > > > > > It is also never redundant functionality of audit subsystem, if enable > > > audit option, audit subsystem will audit all the syscalls, so it adds > > > big overhead for the whole system, > > > > this is not true > Hmm, Why?
audit only audits those syscalls (or rather, operations) you enable it to audit basically.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |