On Wednesday, March 13, 2013 10:46:24 AM Peter Krempa wrote:
This patch adds auditing of resources used by Virtio RNG devices.
Only
resources on the local filesystems are audited.
Further testing revealed that I needed to make a some updates to the audit
package to support this. The auvirt program didn't recognize the event and
because the old/new values are escaped, it needed to be added to the lookup
tables to identify it as such.
In the process of looking at this event, I found out that cgroup resource
assignments of class = path are not escaping the path like it should. Opening
a bz on that shortly.
Thanks for showing me the event.
-Steve