[PATCH] Audit: fix audit nlmsg_len from the kernel

Steve Grubb sgrubb at redhat.com
Tue Jun 2 20:45:02 UTC 2009


On Tuesday 02 June 2009 04:38:02 pm Eric Paris wrote:
> > But lets fix it anyway rather than rely on dumb luck and implementation
> > details.
>
> Self NAK.   Userspace was also written by someone who didn't know
> netlink.  Since userspace is half using the netlink macros and half
> depending on this broken nlmsg_len implementation I don't think we can
> make any changes in the kernel and they wouldn't be backwards
> compatible...

The netlink code is the oldest part of the audit code and predates my 
involvement. We could fix this if userspace had a way of querying the kernel to 
see what the audit capabilities are. There have been many times that I've 
wanted a way to ask the kernel if certain things are supported.

-Steve




More information about the Linux-audit mailing list