Kernel handling of path length

Loulwa Salem loulwas at us.ibm.com
Tue Jun 28 18:52:23 UTC 2005


Hello,
My test case is testing the following:
attempt to insert a watch on a path with strlen() = 4095.

My test case is expecting this to pass ...
but here is what I get:

DEBUG PRINT: Expected path length = 4095: Actual is 4095 (Not counting 
terminating null)
Starting auditd:                                           [  OK  ]
Error sending watch insert request (File name too long)
Error sending watch to kernel
Fail - auditctl command returns 255
FAIL  :  Path length =PATH_MAX(without null) generated error

I thought the kernel should allow a watch to be inserted ... Is the 
above a correct behavior?

- Loulwa




More information about the Linux-audit mailing list