A question about auditd_reply_list and auditd_consumer_data in Audit.c and Auditd-event.c

chuli chul at cn.fujitsu.com
Fri May 16 03:40:55 UTC 2008


HI,
	I have read source code in Audit-1.6.5 about auditd part. I looked up into functions equeue_event(),event_thread_main() in Auditd-event.c,get_reply(),send_audit_event() and main function in Auditd.c. I don't know why it must use a list (auditd_reply_list) here. It seems rep->next is never be used and it's null so that the else branch of if (consumer_data.head == NULL) in equeue_event() will never be reached.

	I feel unsure about above codes. Am I wrong? 

Regards
Chu Li






More information about the Linux-audit mailing list