On 1/10/19 12:45 PM, Song Liu wrote: > Could you please share your feedback on PERF_RECORD_BPF_EVENT for auditing > use cases?
Google shows Daniel was the one looking at audit use cases: https://www.mail-archive.com/netdev@vger.kernel.org/msg250728.html My comment was that using a PERF_RECORD_BPF_EVENT limits the usability with combinations of other tracepoints (e.g, scheduling) when tracing processes.
