[PATCH] Add auditd listener and remote audit protocol
Steve Grubb
sgrubb at redhat.com
Tue Sep 29 19:27:59 UTC 2009
On Tuesday 29 September 2009 01:52:48 pm LC Bruzenak wrote:
> I have been doing this but I really cannot tell if the audisp-remote
> connection succeeds; it returns "0" either way.
> Would there be an easy way to return a non-zero failure indicator?
It sounds like a reasonable request. Looking at the source, it does return
non-zero on certain things. I think its just a matter of checking the queue
size on exit and using that to decide the return value.
-Steve
More information about the Linux-audit
mailing list