Getting events on unix socket

Satish Chandra Kilaru iam.kilaru at gmail.com
Thu Jul 30 15:58:39 UTC 2015


Thank you.
reading from stdin works. However, my program runs as a thread in a daemon
that does many other things. I cannot use stdin.

--Satish

On Thu, Jul 30, 2015 at 11:51 AM, Steve Grubb <sgrubb at redhat.com> wrote:

> On Wednesday, July 29, 2015 02:29:23 PM Satish Chandra Kilaru wrote:
> > I would like to receive events on unix socket in binary format.
> > There is already another program that is reading events from unix socket
> in
> > string format. I created another config file as below...
> >
> > active = yes
> > direction = out
> > path = builtin_af_unix
> > type = builtin
> > args = 0640 /var/run/satish_events
> > format = binary
> >
> > In my test program I am reading events from the socket
> > /var/run/satish_events
> > Surprisingly I see events in string format as well as binary format.
> >
> > Is it by design or a bug?
>
> I'd have to check. I don't think it was intended to run more than one
> instance. What is better, though, is to write the plugin to just read
> stdin.
>
> -Steve
>



-- 
Please Donate to www.wikipedia.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20150730/2102c908/attachment.htm>


More information about the Linux-audit mailing list