Bug 454452
Summary: | RFE: Need for a audit like interface for readahead-collector | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Harald Hoyer <harald> |
Component: | kernel | Assignee: | Kernel Maintainer List <kernel-maint> |
Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | rawhide | CC: | ddumas, eparis, jmoyer, kmcmartin, mclasen, sgrubb |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2008-09-07 09:09:35 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Harald Hoyer
2008-07-08 16:05:16 UTC
I suggest taking this upstream to linux-kernel. RFE's in bugzilla don't really work unless you have someone already signed up to do the implementation. This could be done as an enhancement to auditd, by having it write out audit records with a given key to a separate log file. there is no need for a logfile (a logfile would be counterproductive performance wise) Then all it needs is for an option to auditd to never log events with a special key, then use that key for all the audit events used by the readahead collector. Not sure what the implications are for auditd though. I assume you are removing all your audit triggers after the system is up and running... yes, would be cool, but the audit team doesn't "want" these events ever cross their daemon... How about just hacking a minimilist strace into upstart? I've (somewhat unfortunately :) become familiar with the guts of strace to feel comfortable implementing such a thing. Hit me up in email or irc to hash out the details if this sounds like it would fly. cheers, Kyle (In reply to comment #6) > How about just hacking a minimilist strace into upstart? I've (somewhat > unfortunately :) become familiar with the guts of strace to feel comfortable > implementing such a thing. Hit me up in email or irc to hash out the details if > this sounds like it would fly. > > cheers, Kyle not an option for everydays boot process ok, not needed anymore |