auditing labeled ipsec
Joy Latten
latten at austin.ibm.com
Wed Oct 11 20:40:00 UTC 2006
Linux provides two apis to add/delete/manage SAs and spd.
One is netlink which was extended to do key management. The
other is pfkeyv2, which our setkey and racoon uses.
With all that said, I am not able to figure out how to get "auid" from
pfkeyv2? I can use NETLINK_CB(skb).loginuid to get it when netlink is
used, but I don't think I can use this for pfkeyv2 since I am not using
netlink headers. I am using pfkey message headers, such as sadb_msg,
which don't include this.
Any ideas or suggestions?
Regards,
Joy
More information about the Linux-audit
mailing list