search

SUSE / linux-security-sensor

Linux security sensor
Other
18 stars 9 forks source link

Extending audit Plugin and using it for creating audit artifacts #34

Closed chajain closed 2 years ago

Firstyear commented 2 years ago

One area of concern is what happens when multiple queries end up sharing a rule.

Is there a way we can have a "central" module coordinate the rule addition and dedup the rules so they don't clash maybe?

jeffmahoney commented 2 years ago

I was thinking of something simple like a shared map that does reference counting on the rules.

Firstyear commented 2 years ago

I was thinking of something simple like a shared map that does reference counting on the rules.

Sounds perfect to me!

jeffmahoney commented 2 years ago

This PR has been obsoleted by PR#40.