On Tue, Jul 28, 2020 at 12:02 PM Thiébaud Weksteen <tweek@xxxxxxxxxx> wrote: > On Tue, Jul 28, 2020 at 5:12 PM Paul Moore <paul@xxxxxxxxxxxxxx> wrote: > > Perhaps it would be helpful if you provided an example of how one > > would be expected to use this new tracepoint? That would help put > > things in the proper perspective. > > The best example is the one I provided in the commit message, that is > using perf (or a perf equivalent), to hook onto that tracepoint. I probably wasn't as clear as I should have been. I think it would be helpful if you demonstrated how one would take the SELinux data in the perf event and translated that into something meaningful. -- paul moore www.paul-moore.com