[Fwd: Re: Access attempts]

[Steve G]

>No, the avc message is just misleading.  The pid/comm information for
>network layer permission checks is unreliable because the packet
>send/recv isn't necessarily happening in the context of the process that
>initiated the send or that will handle the recv.

Seems like this should be fixed. Everything in the audit message needs to be
accurate. I think a bug should be filed against the kernel for this.

-Steve


 
____________________________________________________________________________________
Finding fabulous fares is fun.  
Let Yahoo! FareChase search your favorite travel sites to find flight and hotel bargains.
http://farechase.yahoo.com/promo-generic-14795097