Messages in this thread | | | From | Paul Moore <> | Date | Wed, 18 Mar 2020 17:08:31 -0400 | Subject | Re: [PATCH ghak90 V8 13/16] audit: track container nesting |
| |
On Sat, Mar 14, 2020 at 6:42 PM Richard Guy Briggs <rgb@redhat.com> wrote: > On 2020-03-13 12:47, Paul Moore wrote:
...
> > It has been a while since I last looked at the patchset, but my > > concern over the prefered use of the ACID number vs the ACID object is > > that the number offers no reuse protection where the object does. I > > really would like us to use the object everywhere it is possible. > > Ok, so I take it from this that I go ahead with the dual format since > the wrapper funciton to convert from object to ID strips away object > information negating any benefit of favouring the object pointer. I'll > look at the remaining calls that use a contid (rather than contobj) and > convert all that I can over to storing an object using the dual counters > that track process exits versus signal2 and trace references.
Well, as I said in the other thread, I'm not sure we need a full two counters; I think one counter and a simple flag should suffice. Otherwise that sounds good for the next iteration.
-- paul moore www.paul-moore.com
| |