new auparse question

Steve Grubb sgrubb at redhat.com
Wed Aug 31 20:49:46 UTC 2011


On Wednesday, August 31, 2011 04:31:48 PM LC Bruzenak wrote:
> So my question is - is this a bug (I would think so) or should I always
> precede any auparse call sequence with at least one fresh
> auparse_first_field call?

A segfault is a bug as far as this library is concerned. I know other libraries let 
you segfault if you do something wrong. I'll try to make a reproducer and see what's 
going on.

-Steve




More information about the Linux-audit mailing list