audit: reimplement audit_trees using fsnotify rather than inotify
Simply switch audit_trees from using inotify to using fsnotify for it's inode pinning and disappearing act information. Signed-off-by: Eric Paris <eparis@redhat.com>
This commit is contained in:
parent
40554c3dae
commit
28a3a7eb3b
4 changed files with 137 additions and 110 deletions
|
@ -62,8 +62,9 @@
|
|||
|
||||
/* listeners that hard code group numbers near the top */
|
||||
#define DNOTIFY_GROUP_NUM UINT_MAX
|
||||
#define AUDIT_WATCH_GROUP_NUM (DNOTIFY_GROUP_NUM-1)
|
||||
#define INOTIFY_GROUP_NUM (AUDIT_WATCH_GROUP_NUM-1)
|
||||
#define AUDIT_WATCH_GROUP_NUM (DNOTIFY_GROUP_NUM-1)
|
||||
#define AUDIT_TREE_GROUP_NUM (AUDIT_WATCH_GROUP_NUM-1)
|
||||
#define INOTIFY_GROUP_NUM (AUDIT_TREE_GROUP_NUM-1)
|
||||
|
||||
struct fsnotify_group;
|
||||
struct fsnotify_event;
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue