Audit capability patch

Stephen Smalley sds at epoch.ncsc.mil
Fri Jan 14 18:07:50 UTC 2005


On Fri, 2005-01-14 at 12:52, Serge Hallyn wrote:
> Attached is a "final" version of the audit caps patch.  I will send this
> to lkml tomorrow if noone complains.

As Darrel noted earlier, the skb->len and nlh->nlmsg_len checks are
already performed by audit_receive_skb() prior to calling
audit_receive_msg(), so you don't need them in audit_netlink_ok(),
right?  And as he noted, you can just pass the nlh->nlmsg_type directly
from audit_receive_msg() to audit_netlink_ok(), you don't need to
re-extract it.

-- 
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency




More information about the Linux-audit mailing list