[PATCH V2] audit: normalize NETFILTER_PKT
Richard Guy Briggs
rgb at redhat.com
Thu Feb 23 17:29:09 UTC 2017
On 2017-02-23 12:20, Steve Grubb wrote:
> On Wednesday, February 22, 2017 9:50:54 PM EST Richard Guy Briggs wrote:
> > Simplify and eliminate flipping in and out of message fields, relying on
> > nfmark the way we do for audit_key.
> >
> > https://github.com/linux-audit/audit-kernel/issues/11
> >
> > Signed-off-by: Richard Guy Briggs <rgb at redhat.com>
>
> If this is reworked, do you mind including a raw log event in the explanation
> part of the patch? I need to see the resulting event to see how user space
> needs to adapt.
Yes, I'll make a note to remember to add that.
> -Steve
- RGB
--
Richard Guy Briggs <rgb at redhat.com>
Kernel Security Engineering, Base Operating Systems, Red Hat
Remote, Ottawa, Canada
Voice: +1.647.777.2635, Internal: (81) 32635
More information about the Linux-audit
mailing list