get_field_str() and interpret_field() bug with multi-word fields

Steve Grubb sgrubb at redhat.com
Fri Aug 15 14:10:49 UTC 2008


On Friday 15 August 2008 09:58:54 Matteo Michelini wrote:
> I'm working on a binary format for the linux-audit system as part of a
> university research project.

Big-endian/little-endian in aggregated logs? Will the kernel authors allow the 
encoder in the kernel? XDR was the only option we had last time. Versioning 
of structs? How do old user space tools work with new kernel that may change 
layout? Patents?

-Steve




More information about the Linux-audit mailing list