[PATCH] Add audit uid to netlink credentials

Stephen Smalley sds at epoch.ncsc.mil
Wed Feb 9 18:53:44 UTC 2005


On Wed, 2005-02-09 at 13:52, Patrick McHardy wrote:
> Could you explain how this can happen ? From what I can see whenever data
> is queued to the receive queue the input function is called immediately
> through sk->sk_data_ready() -> netlink_data_ready() -> nlk->data_ready()
> and processes all queued packets, except in the case you pointed out,
> when audit_netlink_sem is already taken.

More packets may be queued by another sender while audit_receive() is
still processing the original one, so it will process them too.

-- 
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency




More information about the Linux-audit mailing list