On Thu, 2022-01-06 at 16:16 +0000, Zbigniew Jędrzejewski-Szmek wrote:
I know that you said that the scripts are needed because of "magic stuff™"
that the scripts do, but sorry, that's not a justification: *everything* that
can be done using a shell script can also be reimplemented independently.
Right now audit pulls in the whole initscripts stack, this should all be replaced
by some small helper. (Maybe a separate binary, or a small shell script, or
maybe something in auditctl…. I don't know because I don't know audit.)
As I understand the bug, it's not a question of whether the thing can
be done, but whether it can be known *who did it*.
--
Adam Williamson
Fedora QA
IRC: adamw | Twitter: adamw_ha
https://www.happyassassin.net