Is zero a valid value for the pid member of the AUDIT_SIGNAL_INFO message?

[Richard Guy Briggs]

On 14/03/12, Steve Grubb wrote:
> On Tuesday, March 11, 2014 06:15:17 PM Richard Guy Briggs wrote:
> > Is zero a valid value for the pid member of the AUDIT_SIGNAL_INFO message?
> 
> Well, pid=0 would be the kernel. So, its valid but unlikely. Offhand I don't 
> know why the kernel might try sending a signal. Is this a problem?

It isn't a problem.  It is a question of trying to understand it and how
much effort to code the existing behaviour.

> -Steve

- RGB

--
Richard Guy Briggs <rbriggs at redhat.com>
Senior Software Engineer, Kernel Security, AMER ENG Base Operating Systems, Red Hat
Remote, Ottawa, Canada
Voice: +1.647.777.2635, Internal: (81) 32635, Alt: +1.613.693.0684x3545