Log corruption

Steve Grubb sgrubb at redhat.com
Tue May 10 18:07:03 UTC 2005


On Tuesday 10 May 2005 14:01, Chris Wright wrote:
> Technically, the kernel side is right, and the userspace side should be
> updated (the nlmsg_len is header, plus data, plus alignment),

When I was researching it, I found that the original code used the netlink 
length incorrectly. Your patch was correct...but since someone (before I ever 
got involved) started us out this way, we cannot change it.

-Steve




More information about the Linux-audit mailing list