Red Hat Bugzilla – Bug 428275
Need EOE (End of Event) audit message sent from kernel.
Last modified: 2009-01-20 15:10:33 EST
Description of problem:
There was a patch sent to linux-audit mail list that provides the EOE audit
event. This lets userspace realtime analysis programs know when they have the
full event instead of waiting for a timeout.
This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux maintenance release. Product Management has requested
further review of this request by Red Hat Engineering, for potential
inclusion in a Red Hat Enterprise Linux Update release for currently deployed
products. This request is not yet committed for inclusion in an Update
You can download this test kernel from http://people.redhat.com/dzickus/el5
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.