Fwd: Re: Fw: Audit records for start/stop auditd

[Steve Grubb]

On Wednesday 06 April 2005 09:57, Stephen Smalley wrote:
> Won't that break the kernel ABI?

I put it at the end so apps that have already been compiled with the old  
siginfo_t size won't break. The app is handed a pointer to the structure by 
the kernel, so its not like userspace ever allocates the struct, it just 
references the contents of it.

-Steve