Robert Watson 8805ca53e7 Rather than copying out the full audit trigger record, which includes ... a queue entry field, just copy out the unsigned int that is the trigger message. In practice, auditd always requested sizeof(unsigned int), so the extra bytes were ignored, but copying them out was not the intent. MFC after: 1 month		2008-03-02 21:34:17 +00:00
..
audit_arg.c	Rename several audit functions in the global kernel symbol namespace to	2008-02-25 20:28:00 +00:00
audit_bsm_klib.c	Add audit_prefixes to two more globally visible functions in the Audit	2008-03-01 11:40:49 +00:00
audit_bsm_token.c	- Add audit_arg_audinfo_addr() for auditing the arguments for setaudit_addr(2)	2007-06-27 17:01:15 +00:00
audit_bsm.c	Rename several audit functions in the global kernel symbol namespace to	2008-02-25 20:28:00 +00:00
audit_ioctl.h	Don't expose #ifdef NOTYET parts to userspace via audit_ioctl.h, just	2007-04-29 16:20:32 +00:00
audit_pipe.c	Change "audit_pipe_preselect" to "audit_pipe_presel" to make it print	2007-12-25 13:23:19 +00:00
audit_private.h	Add audit_prefixes to two more globally visible functions in the Audit	2008-03-01 11:40:49 +00:00
audit_syscalls.c	Rename globally exposed symbol send_trigger() to audit_send_trigger().	2008-03-01 11:04:04 +00:00
audit_trigger.c	Rather than copying out the full audit trigger record, which includes	2008-03-02 21:34:17 +00:00
audit_worker.c	Rename globally exposed symbol send_trigger() to audit_send_trigger().	2008-03-01 11:04:04 +00:00
audit.c	Add audit_prefixes to two more globally visible functions in the Audit	2008-03-01 11:40:49 +00:00
audit.h	Implement AUE_CORE, which adds process core dump support into the kernel.	2007-10-26 01:23:07 +00:00