[PATCH] Add auditd listener and remote audit protocol

Steve Grubb sgrubb at redhat.com
Tue Sep 29 19:27:59 UTC 2009


On Tuesday 29 September 2009 01:52:48 pm LC Bruzenak wrote:
> I have been doing this but I really cannot tell if the audisp-remote
> connection succeeds; it returns "0" either way.
> Would there be an easy way to return a non-zero failure indicator?

It sounds like a reasonable request. Looking at the source, it does return 
non-zero on certain things. I think its just a matter of checking the queue 
size on exit and using that to decide the return value.

-Steve




More information about the Linux-audit mailing list