[PATCH] Audit: fix audit nlmsg_len from the kernel
Steve Grubb
sgrubb at redhat.com
Tue Jun 2 20:45:02 UTC 2009
On Tuesday 02 June 2009 04:38:02 pm Eric Paris wrote:
> > But lets fix it anyway rather than rely on dumb luck and implementation
> > details.
>
> Self NAK. Userspace was also written by someone who didn't know
> netlink. Since userspace is half using the netlink macros and half
> depending on this broken nlmsg_len implementation I don't think we can
> make any changes in the kernel and they wouldn't be backwards
> compatible...
The netlink code is the oldest part of the audit code and predates my
involvement. We could fix this if userspace had a way of querying the kernel to
see what the audit capabilities are. There have been many times that I've
wanted a way to ask the kernel if certain things are supported.
-Steve
More information about the Linux-audit
mailing list