auditd netlink headers

Steve Grubb sgrubb at redhat.com
Fri Apr 29 19:36:24 UTC 2005


On Friday 29 April 2005 15:26, Chris Wright wrote:
> I'm missing what in auditd allows for continuation of a netlink packet
> from the kernel. 

Nothing does. This was one of my concerns back in December and I even started 
putting code in place to allow multiple packets. It was discussed and I was 
told we aren't sending continuations. 

Show me how to produce the problem and I'll fix it.

-Steve




More information about the Linux-audit mailing list