[grsec] Learning log differences?

[Brad Spengler]

On Wed, Mar 30, 2005 at 06:43:12PM +0200, Marc Schiffbauer wrote:
> Hi,
> 
> are there any differences in the format of the learning logs between
> the role or subjects based and full learning mode?
> 
> gradm -E -L ./log vs. gradm -F -L ./log

There is no difference in the format of the log, but in the case on 
non-full learning, the subject and role of the process making an access 
are logged to the learning log.  In the case of full learning, these are 
logged as "/" and "default".  So if you wanted to use some logs 
generated by subject or role-based learning in a full learning policy 
generation, you'd have to rewrite them to have the "/" subject and 
"default" role.

-Brad
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://grsecurity.net/pipermail/grsecurity/attachments/20050331/5f24063f/attachment.pgp