[RFC PATCH] audit: make sure we never skip the multicast broadcast

[Paul Moore]

On Thu, Jun 15, 2017 at 12:11 PM, Richard Guy Briggs <rgb at redhat.com> wrote:
> On 2017-06-15 11:29, Paul Moore wrote:
>> From: Paul Moore <paul at paul-moore.com>
>>
>> When the auditd connection is reset, either intentionally or due to
>> a failure, any records that were in the main backlog queue would not
>> be sent in a multicast broadcast.  This patch fixes this problem by
>> not flushing the main backlog queue on a connection reset, the main
>> kauditd_thread() will take care of that normally.
>>
>> Resolves: https://github.com/linux-audit/audit-kernel/issues/41
>> Signed-off-by: Paul Moore <paul at paul-moore.com>
>
> Looks good to me.
> Reviewed-by: Richard Guy Briggs <rgb at redhat.com>

Thanks.

Considering the trivial nature of the patch, assuming no one raises
any objections I'll merge this into audit/next tomorrow.

-- 
paul moore
www.paul-moore.com